last executing test programs: 1m46.972124122s ago: executing program 0 (id=1271): userfaultfd(0x80801) (async) r0 = userfaultfd(0x80801) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xac81cb68a9c69a59) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x7fda8000) read(r0, &(0x7f00000000c0)=""/175, 0x20) (async) read(r0, &(0x7f00000000c0)=""/175, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m46.691898256s ago: executing program 0 (id=1273): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x10f2, 0x21e001) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f00000000c0)=[{0x3, '\x00', @data=0x3256, 0x14}]}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="2c385aa3d49100dc4626c892b6bc436a", 0xfffffffffffffecf) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/43, 0x2b}], 0x2}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005400)=ANY=[@ANYBLOB="440000000d0a01080000000000000000030000090800044000000000280003802400008020000180190001006158aa540574fc17c4a671cb7cf3b942ebd6c770c2432f2e"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4045) (async, rerun: 32) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@ieee802154, 0x80, &(0x7f0000000140)=[{&(0x7f0000000380)="97f208e04e67b844a89fbbe11580556b4c21f1d26338e4183d58f0e8542417a4c99f435bbc816c05812e2311370c5eeac17002a153dad8e089a3ed4be9c2190dca6a99d72377780392cc28c058ebdd203fcf14ec4b575e7522d608c2bbf51561b45c6b04ee1c10ddf958b33bdbbd38fe98eb1e4da20a8ed72d40b49ed44499e2ffed8b7c6bd0ca606634139a40b5775c3bfa00b8378a31ff40bd548ce2a85dbb040db975d343011efe561dd376e810377c918d04de67be", 0xb7}, {&(0x7f0000001940)="28f58e02cea9ca4ba2a9982a010eff15e878c3571ac53d66b1af30b5e629db2c1894a9a22e6e9e0f8a6343ecdbd19551cfde1436b46b5a1ba8f480878d7d57e871759170ffe2dacf751c39820adc474534b6ac409e40961dba180a64abb142d163c32340640df24e0f55a0367beea2e90778b6c02c06f8ff44cff63baa8665507abd21504181ae0b7412349d1d6575d49a1a5b44817278b9edbba837409f2755c061a76338558abcd35dee8e5686f7132f513dcd5ac6e97a97f983875cdf43c280b46292564ca8923c5b397e12dae384cf3df802175423f15897fd", 0xdb}, {&(0x7f0000001a40)="c71b6ef0e17023dc3bb6e943b4477833902aef623a4fd5ecd12a8273479ec5c148aef96281a5ce2cac2f5ba2e0c2ab49f51c132008d56d6e1fce34e1741d4586f048a7eff0a46ea7fbe38c4ba04f048dba6a0a05397c054fa7f6b40aa8c2a3eeb1da44cb404bc03657eefc738718018fe7095518fe4998e878c681168e390473a0ce5b09e4b078f5761887afb38b30b6a245af49aeceb09804f2113044c7f50a21efc8680db3f3f36f130c77a47d44b487c58fcefce68df1d75bd359d63f25399d246e2d56b4fc1865819a3b22607be83ee237d6e1fccf85777c8e3695d2", 0xde}], 0x3, &(0x7f0000001c40)=ANY=[@ANYBLOB="90000000000000003a00000004000000ef8ddd0e66d3b8c1c17d17bdab338f36115f9c7ed0cfb8001110e2bfbdc97c0f763c8d2beadbc6dbbf9162ab4fa2359a12bd9a0998edab5750b189493d2f7190587bbf19fcead41fb9a36717cb7cfead6f99d989aabae764a1b76c5baa4ba0b13f7dacba04e2e7a4670009bdebabc3d6d14e454b0ff7ecad963700000000000058000000000000000401000004000000ceadbab451833dc7e4f2dbda4619f16b10ffe31acdf363331b701a409047038989461e61ff75b55b28c7000099b40ce2bbd959ebdd3c4fa78f55551c20998a5cf0cddd9e0000000902432b2332bd682c5377d57018eb2afd8184899cac7871b34f1616da6b151c1f7ead91c3f099b4ae39ea00000000000000"], 0xe8}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x1330, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1298, 0x1298, 0x1298, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00', {}, {}, 0xff}, 0x287, 0x1108, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@rateest={{0x68}, {'tunl0\x00', 'ipvlan1\x00', 0x2a, 0x3, 0x3ff, 0x8000, 0x4, 0x4, {0xc4}, {0xa}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5], 0x0, 0x2}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'gretap0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1390) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (rerun: 64) 1m46.69128386s ago: executing program 0 (id=1274): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x8090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002dbd7000ffdbdf250300000044000180140002007665747add1168315f746f5f7465616d00000008", @ANYRES32=r5, @ANYBLOB="1400020076657468305f766c616e00000000000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050005000700000005000300050000000500050024000000"], 0x70}}, 0x4004000) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000180)={@empty, r8}, 0x14) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r10, 0x708, 0x40) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x4, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r12, 0x3b66, 0x3) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x64, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r11, 0x10b85, 0x49060}, [@IFLA_NUM_TX_QUEUES={0x8}, @IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfff}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0xfffd, 0x2, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x0, 0x0, 0x1}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffa}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103afffe800000000000000000000000000000ff02000100de000000000000000000018600907800"/70], 0x0) 1m46.082081379s ago: executing program 0 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0xffffffffffffffee, 0x1ff, 'syz0\x00', 0x0}) syz_clone(0x91, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0x0, 0x1}]}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 1m45.789762192s ago: executing program 0 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r2, 0x801, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x8000000000000001, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x20000c595, 0xffffffffffffbff9, 0xffffffffffffffff, 0x4, 0x0, 0x80000004000000, 0x4], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m45.271569101s ago: executing program 0 (id=1285): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1m45.222010687s ago: executing program 32 (id=1285): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 36.610203376s ago: executing program 3 (id=1972): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@in6_addr=@empty, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@loopback, @remote, r6}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 36.511755634s ago: executing program 3 (id=1975): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x91}, 0x18) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1006, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x17, 0x10d, 0x0, 0x0, @binary="b669019f45719e4c0d95279ada9accde47f193"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x4, 0xb}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r1], 0x50) 36.51127804s ago: executing program 3 (id=1976): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x18, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}]}}, 0x0, 0x2a}, 0x28) (async) sendto$netrom(r2, 0x0, 0xffffff45, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) io_setup(0x202, &(0x7f0000000200)=0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000194c0)={0x200, "b8d8e0b75e581b8d407d4c027b5efe54cf865d959dae03352872e6d53f837ca8", 0x5, 0x2, 0x6, 0x8, 0x8, 0x3, 0x6, 0x1}) (async) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f0000000140)="21d3011f", 0x4, 0x3000000000000004}]) (async) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000100)={0x80, 0x80000, r0}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) io_submit(r3, 0x5, &(0x7f0000019480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000040)="23d190002aea9bddc44879582b9b1e1669d7791933584ebfc94b8d1b897605fc7650fccc825dc0460b3d8ba372bf58cc9a9702ed51e1b9007e5820e63bcf6cd626d84b2ccf66d4744a3d3bfdc373635c0701e62fa1b0ed61e875ad152b10c9adb2ba85f810c5", 0x66, 0xdc, 0x0, 0x1, r0}, &(0x7f0000019540)={0x0, 0x0, 0x0, 0x1, 0x200, r4, &(0x7f0000019200)="8f7c935c4e1755d1b40aad18895ce041325e6d968a378db80aef57a038521a5217076f63d817f7813ddfcdf06939d82508a3bea14ff52e8e7c5b965aa0dd60b7ed9d13e11129ec7408decca5f87edfd85ee45d63ce6a197e8c414a950497233f8badcd80524f7bc6515fc308a8ebd361e62e60fefe25dbd4d0690c3466b3ee1c48e63c1882acd7635c3107d3cdc7f530454c3a08e99418f8c3a9ed3e99266e57c7ef261c5980f59db51a109735ce8ba5fac47b5d67c09ed4ccd0b2a15308ac89f6f19296769b3a9ace06aa23141ff77c8cccc6d935a9a66a64e57d6de362081cd5946bd98fd5e562db96781767d8c8361fb9249056abac9ed278fb55", 0xfc, 0xffffeffffffffff8, 0x0, 0x3, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000180)="7ba079997877ce708080e9f8e45ed033aa4fe70ac3767c163edd11311eb025329e3c46dcf5067464420da75842459e7252bd38fad9", 0x35, 0x2, 0x0, 0x1, r0}, &(0x7f0000019380)={0x0, 0x0, 0x0, 0x7, 0xffc0, r0, &(0x7f0000019300)="b57e269b94c86c51d9c8c9a2d143dbbafc77b72157fcba82af7c8c2b99010b5381e549bf5900de0074be2a72133383ee1cb4bfcbee3a55110136b4d5236b0eee24b8a02f48e1d900f1c9cc547b88525b7c98144a0acdee26c3f2ce6aaccacee9f9631993c5ac8a24f4f3dcc8935b936aec75a17121dfa3bbd5b76c97", 0x7c, 0x3, 0x0, 0x3, r0}, &(0x7f0000019440)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000193c0)="1f736a1c62a69dffa7977b1bd33892b5a05faf7cd0c24a5f3c4e57fbedbfae8bf657dae0de2bf03996427c2709cb58f6ea0ce085bbe0b940282da39490c01350c5d8e51c9a5cb928a4f3854f4cb58e35e9d927f8a268adab9318c65bac6eab7d7719d233cff92cfe85d9dd", 0x6b, 0x6, 0x0, 0x1, r0}]) (async) shutdown(r0, 0x0) (async) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 36.461005217s ago: executing program 3 (id=1977): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000060012800b00010065727370616e0000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x20048010) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r4) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x88880}, 0x4040044) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r6) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r7, @ANYRES64=r7], 0xcc}, 0x1, 0x0, 0x0, 0x2400c000}, 0x200048c0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 36.460712945s ago: executing program 3 (id=1978): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x4, 0x29, 0x4, 0x5, 0xcc7, 0x400008, 0x8d, 0x8, 0x1f, 0x2, 0x1, 0x1, 0x1, 0x8026, 0x81, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x400008, 0x100006, 0xf7fffff7, 0xfffffff8]}) 36.209929847s ago: executing program 3 (id=1981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (rerun: 64) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffff8000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = dup3(r1, r0, 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x190b, 0x1}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x164, 0x0, &(0x7f0000000c40)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x2, 0x0, 0x1f}, @fda={0x66646185, 0x6, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x0, 0x29}}, &(0x7f0000000640)={0x0, 0x20, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@fda={0x66646185, 0x5, 0x0, 0x1a}, @fda={0x66646185, 0x6, 0x1, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000740)={0x0, 0x20, 0x40}}}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/201, 0xc9, 0x0, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/159, 0x9f, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0x10b}}, &(0x7f00000009c0)={0x0, 0x28, 0x50}}, 0x400}, @acquire_done={0x40106309, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b80)={@ptr={0x70742a85, 0x0, &(0x7f0000000a00)=""/95, 0x5f, 0x1, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/212, 0xd4, 0x2, 0x2f}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000c00)={0x0, 0x28, 0x50}}}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) (async) setrlimit(0x8, &(0x7f0000000140)={0xff, 0x100000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xb, 0x1000000000000, &(0x7f0000000380)="cbe6ccfc0b6e6127001141"}) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x5}) (async) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000240)) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x10, 0x9}) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000d000000000100003092b9aae3cdc915688e419d7377d88f60b8fa0a9600e150576aa9e50801a91c7af9ea1da3d369a08e3a02c5595bfada94a3785250b1fded6d0dfab302fd830a9ebfec259886c750e5069499d80cf9f1d1240501361a9c03760b908626acbb32816b0509d0984d76d794836854ba51500ca6c0c09381f0d5ee3c471b279b23921a8fbc1e95"]) (rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) 36.160747353s ago: executing program 33 (id=1981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (rerun: 64) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffff8000, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = dup3(r1, r0, 0x0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x190b, 0x1}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x164, 0x0, &(0x7f0000000c40)=[@acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x2, 0x0, 0x1f}, @fda={0x66646185, 0x6, 0x1, 0x33}, @fda={0x66646185, 0x2, 0x0, 0x29}}, &(0x7f0000000640)={0x0, 0x20, 0x40}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@fda={0x66646185, 0x5, 0x0, 0x1a}, @fda={0x66646185, 0x6, 0x1, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000740)={0x0, 0x20, 0x40}}}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000940)={@ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/201, 0xc9, 0x0, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/159, 0x9f, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0x10b}}, &(0x7f00000009c0)={0x0, 0x28, 0x50}}, 0x400}, @acquire_done={0x40106309, 0x3}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b80)={@ptr={0x70742a85, 0x0, &(0x7f0000000a00)=""/95, 0x5f, 0x1, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/212, 0xd4, 0x2, 0x2f}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000c00)={0x0, 0x28, 0x50}}}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) (async) setrlimit(0x8, &(0x7f0000000140)={0xff, 0x100000000}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xb, 0x1000000000000, &(0x7f0000000380)="cbe6ccfc0b6e6127001141"}) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVid:De', 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x5}) (async) r9 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000240)) fcntl$lock(r8, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x10, 0x9}) (async, rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000d000000000100003092b9aae3cdc915688e419d7377d88f60b8fa0a9600e150576aa9e50801a91c7af9ea1da3d369a08e3a02c5595bfada94a3785250b1fded6d0dfab302fd830a9ebfec259886c750e5069499d80cf9f1d1240501361a9c03760b908626acbb32816b0509d0984d76d794836854ba51500ca6c0c09381f0d5ee3c471b279b23921a8fbc1e95"]) (rerun: 64) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) 26.671096725s ago: executing program 5 (id=2159): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) flistxattr(r0, &(0x7f0000000080)=""/108, 0x6c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/117) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x7, 0x0, [{0x29b, 0x0, 0x2}, {0x9ea, 0x0, 0xaa3}, {0x0, 0x0, 0xfffffffffffffbff}, {0xb38, 0x0, 0x6}, {0x40b, 0x0, 0x4}, {0x9c4, 0x0, 0xb}, {0x951, 0x0, 0x7}]}) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) close_range(r0, r2, 0x2) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) fdatasync(r0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5f6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xecf}]}, 0x68}}, 0x48000) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000004c0)=[r2, r0, r2, r3, r1, r3, r0, r2], 0x8) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000500)=0x1, 0x4) r5 = openat$cgroup_int(r2, &(0x7f0000000540)='memory.low\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000580)={0x7, 0xaf09, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)={r6}) ioctl$FIOCLEX(r3, 0x5451) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x1) socket$nl_route(0x10, 0x3, 0x0) fcntl$setpipe(r5, 0x407, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000900)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{&(0x7f0000000600)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000640)="62881a500e874374f2ab1d78fbd9f938a68fcf8e4c57d00b74f672f3d7790da461e697c7a9af0bb3af1386af0277a4438e604b24d74c969845b3011a068ecd148985d4a37e1e9cffaa66747d5a783ae99bb5101e22dc5cd978083845132fd29af3c7bd1100c89e2a524e353fdc687c25e88d5f27b647a1c5d640e74440f62b3c", 0x80}, {&(0x7f00000006c0)="2868fef157ec8840765034a81d36891f40c761f5eb453fbf3a22191b90c61a717b318e4608e6b33a69215c42eb02dd272bbbc7bcf95c548b4a8644f219efb6469fde5233cfeabb5f125ddc75d3a4956b80ed3ea556aeaf1b6931af5a01680b96d24930156e5b530d062ad5dadefb9868f2898d19761595144a9d1453aa1bf8e9190622758387e78b0a791c4ccf286074bc0821e17e7754272ba2c8f7808e80634ca0cc49af68e6bf34fed0323cf29c2109dd053e9b928a5fdce59d448e480695d49d2b5266fb902413fd98e2ee4b2544dba19d414484fe0ee31f1994", 0xdc}, {&(0x7f00000007c0)="9bcc1164c8ae38a3fcced0a551b3247c3383f8494745a35755a2f1d304a5dce1b5240c6fb81a886d981733cc84836b78607c1bfa6f31dc0ce9ae12ba9b3dfbba00795f97afa42a84f0fd99466e4834e49b6eac68a050612770d5f9ead17632b33c4cd18a5c12e89d990b25e0abd5afeb2d3bafb2ad15bd6cd0bf6c22a7cdb84dedfc636224d508c60875583700d35d33cefa640a8e886c9be2d9c8042cc5931f50dba374adf99dadf4d5256897dd2600e8c882be5896e150b0a37a324edc076f855933a9301757f0a08936568a5c1c432c9c5b5341aa6a4db5521a4a", 0xdc}], 0x3, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}}}], 0x28}}], 0x1, 0x44) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000009c0)=0x1000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000bc0)={r2, &(0x7f0000000a00)="ce89879ea600e00d083f1bdf9ab8fa1997508a44274ca336f20bd92356bb7127ac62ca032c6ce0620ff1f69c374a92f39e96674d3d7510ba0391dbf294734f3252d0e2d902501ccffa8c13953aa0099a9dfde221f4143fdd57d78db55d594d6915c7012b8f74c7c7eeceaeff88ab12743ca70404350bf02fa2bb4b0ba2606d0a4d28f87b1a178286946ca0c71ab58e425241620d80ef05f37272ef7298d9ffdfc7735ad2389157f268b21575cc70c19dfd7754df28f4290d0dadc1d5a7b22a4ca9ebc291c23385013a0706b9399f46cd64f48e707d064c41a5eb227e754462898817cd19d2b499dfbb82730bb56d92d82363df95a479193c4fbac621e2", &(0x7f0000000b00)=""/143}, 0x20) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000019}, 0x20000080) 26.611232385s ago: executing program 5 (id=2162): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001d00)=[{0x0}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040000) 26.551288317s ago: executing program 5 (id=2164): kexec_load(0x0, 0x1, &(0x7f00000022c0)=[{0x0, 0x0, 0x1000000116094000, 0x1}], 0x140000) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000140)={[{@dyn}, {@flock_local}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) kexec_load(0x5, 0x1, &(0x7f0000002280)=[{&(0x7f0000002240)="4958926109a8620c54bd6ae3911ff4d75b947bca7e0ff135841f5cab494e35e1", 0x20, 0x9, 0x5}], 0x160000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, &(0x7f0000001f40)=""/231) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x7) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a1, 0x1c891, 0x8, 0xd1}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 26.542740132s ago: executing program 5 (id=2166): mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000080)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0/file0\x00', 0x112) getdents64(r1, &(0x7f0000000000)=""/49, 0x31) setresuid(0xee00, 0x0, 0xee00) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) 26.431629215s ago: executing program 5 (id=2167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="de3b58f8c6ff4338e9c3d71ade1ec6ec6ba08b7c5fcef060ca8dd6e101f14152cecb9417d9d453894a10bfd49b8305432087c6ceba937ec2fe08bb9316524900f134e5ebd3d9f242916aff4530063d469aca08ab93bbfc89d88c600cebec6c9ab7363ed91e025f0ae3c28e846c3cb408d2f458e35f82b41d856d81a05fdfeec5a88674bb19c7a15441f7146ab7eb0dd5e9a777413174c2993eb88d89286865196ca2ee13b1241ee4b179b937430a77f6570868d49140340cd737b3cd3d7491dea7e3985a7ea298a1e59d928a69f2f7798f5ebc27cc2b9ef396a90a69c8cc68e110465db82994423bd6861c1c1182f1ea3240cda06520", @ANYRES8, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc010) 26.120387849s ago: executing program 5 (id=2175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3dfa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x10001}, @alu={0x4, 0x0, 0x5, 0x2, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x1, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0xfffffff8, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x1, 0x5, 0xa}, {0x4, 0x3, 0x2}]}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r5, 0x4) recvfrom(r3, &(0x7f00000000c0)=""/117, 0x75, 0x10000, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x80) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @llc={@snap={0x155, 0x155, 'm', '\x00', 0x88ca}}}, 0x16) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000eb006c9404000000950000e5b2b39467e349aa745910517685ebbbbd5be76a03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = signalfd4(r6, &(0x7f0000000080)={[0x6]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)={0x14, r9, 0x311, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000008c0)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x44, r10, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004084}, 0x8800) 26.03581726s ago: executing program 34 (id=2175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3dfa}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x10001}, @alu={0x4, 0x0, 0x5, 0x2, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_fd={0x18, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x1, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0xfffffff8, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x1, 0x5, 0xa}, {0x4, 0x3, 0x2}]}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000005c0)=r5, 0x4) recvfrom(r3, &(0x7f00000000c0)=""/117, 0x75, 0x10000, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x80) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @llc={@snap={0x155, 0x155, 'm', '\x00', 0x88ca}}}, 0x16) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x4080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000eb006c9404000000950000e5b2b39467e349aa745910517685ebbbbd5be76a03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = signalfd4(r6, &(0x7f0000000080)={[0x6]}, 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)={0x14, r9, 0x311, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0c4) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000008c0)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r16) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r17, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000900)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000940)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x44, r10, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x84) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004084}, 0x8800) 2.448879012s ago: executing program 1 (id=2564): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xf4240}, 0x94) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xf4240}, 0x94) (async) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) 2.37852711s ago: executing program 1 (id=2568): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0x0, 0xfff2}, {0x6, 0xf}}, [{0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.25069347s ago: executing program 1 (id=2571): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d000000000000000000000002000000"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000002d000000000000000000000002000000"], 0x14}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001a00010000f0ffffffffffff0a00002400000000fc"], 0x20}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) (async) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) accept4(r2, &(0x7f0000000300)=@tipc=@name, &(0x7f0000000500)=0x80, 0x80000) (async) accept4(r2, &(0x7f0000000300)=@tipc=@name, &(0x7f0000000500)=0x80, 0x80000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002840)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x1120, 0x29, 0x36, {0x1d, 0x220, '\x00', [@generic={0xfe, 0xfa, "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"}, @enc_lim, @generic={0x6, 0x1000, "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"}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x5e, 0x1b, '\x00', [@generic={0xff, 0x22, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c3"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x4c, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x12f0}}], 0x1, 0x810) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000002840)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x1120, 0x29, 0x36, {0x1d, 0x220, '\x00', [@generic={0xfe, 0xfa, "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"}, @enc_lim, @generic={0x6, 0x1000, "53089e51ace07cfe7d150048966e4a27254ce7d4f91f27f070228ad18e152a9fc0eb863777497507cc1b79ff9f8ee1365bcbc178ced0ee0051a11fe964975bb53f00ed7ae518f88990c0cbee9c237ddcfc6de70919bf74f16ea1d3e61b3211be72d143596d9655bec0458bb572bc32d7c542b1e4d1b2da3fce57f942c3a105612e27102a3f9b215df147681011d714cb4ffdde8e22e0b735b00e0dfbe28eadd242e3f1abcc72953555680de0672a0b640aa3a7ccab5cc0e47f95f4bae34db13ba4d991053d33e7feb2c1efb84475f06e3fad305a6370ae2260c85ce51b4b0ab9cce56a99a55f67501d318b38fdcccb14b387f70632a1b48bda46b80de4c6fe6e6d4ff39ed692d0653c41608f35b9069afc6bde5c78643d168fd0d002c7fd73947d95501f8c07fdae39da088a8ed4b1334d8eeba156ffe95b21e6296181c2524078aad7ed905a133765c0bcc6732fb6203d377ea171a0ba8e843ebc8b280f7de8b012180bf64706304f3dcceeb132f06fff4db126c54fb0b5064fff5e8194a842e0730613a9d1e7da40f67698f7425caebeb41a2a975c920bf316713a00b03a10477348bb56f1afa359dfd8b08cbbb7adbe119bc6fdde9b229c8c238c0000a0d999f28a462a0d0b5987cc7438cf2854ef9ed5a6492f97ccfa71427d8c308b22a55741aba373ce07affb43c792df9b25a951c04b1fb90ffc0dc476bcd95b1528ca267676f8a945c13816234258d03e82564112279d8d5b794c9b134aafabb3b78c33845746fe07e5b3825aaf3e2b2fbcb8661da996c550a127193e77c199d3c42a4aa0b63539e3ec86bec693f2e9eebdde1523897630cd794fe85d0dfe732b8c0a28db882a81ed9e38a3848652f97336a33498e6122a1e387653d90e5b03dbd1b15a868428703a567dd17f4f9fec63cb030ea2ecd5e498d1387c60dfdb3053f89baeab2eff4290e523cbbe050e5e7e8d367d2e7c627acae31e452dc6f3e29e7a2a7f016b085c539d5c672741964933d7661b4ad75cf8044cd9b1800f38dad4898217ae00e6e450f5be42da528e64455772a236cfcd832b04b7be093ea9218d6e688d426c18914e445176d1572404667a336ece4221546a2941ce0bde25a68279262fd21864d074592c0d8acb8f249c21f73a64dfbbb6ad29467cde40cb8936e8899ed0b74ff62da1be58a577748d64e877b141a7e8d6ee6fc7cd77d377b9e85c2b2d09c260090032b59148ec43b879c688760738008fbf032e0974874d506d08b33885b7731928cc71515b639c2fb50e1e3f4527da2859967864fbe1d0613fa343aee68f7c30f8d037f83827530be77335d22c4da09ffc1e6a61884a2e1ddb673e49963a72a980fb325b121b7725d30d7977302830580d09a3ac6785c32bf276b8d9225e802de0de8dd02719067a3683483732d89742775be8d4b414533f9f559fe5ebf125bf33ce5d9796b9ca64d83a2c7a28096af72d70e1de995e5724a4401326f8146d2e60c3b00e4244ad4dfa7118fcd61c47fc9d6fcb6e8a17fc1a47417938e507528abd5d258943702067afe03a49eaef705ef23b6535157ed28ab62f0eee273a512e972785ea10d0a4b53b3e9e3d54a64fbb824dcec9dbf898f67006f90cce4d370775738589b9b2b27c0c266fd1e21c7dc4bb50e6b0c81cfd70f4df59bff67a61be15e0543ff7edcbbe1f1db967385dc049a947b89406379a7f97f29b115a57cf8d3e35c2eee7da44a1537e9cd630a96590e1f74e0b696d1e52f78568fffb58986baf8ada23fb067226f7f5845ac5f84218ff185aeeb003495973d231f466311b28289a27a7d9c273d2ccd6d3cd624d6cf0a251148a5d899c69df03b92ee53165bd9489d8081f30a78bfc0a5c5efd550d717b3974311d7a1e82d77d89c7fcbc0097f15bb1a6c1187c4271bae4af08b38b7d8e751b2ec7ec91add5186d7cb60381bfa344b1368c39823804ea9ddd31498ebb58d8f591c83576262e626e7055b977c415af5a59956b1d341867405deb8903e531bbef64c9843ce86596c43f883113ab657aa88b273daa62586b919b67de51502ddcaecb126ea6b31b4a4bc2299866c17c5ed8018149ef13462068a2495be68e916c3e3676352ab1aa06b7218ea3c38d5d5348aa6f069dd36016c4ad27d681f20228efd504cb68b2ca3aa36bea42283ae937119315040f31cca9a45e4106d1174692fbaff207e04e390a1f6a08d5f7edebd4ac26a5d5af6f77597ae956168a73c73835408ee35c9901b4e47ebc7e83ed4f090a9c4a23f5550520b4bba093fe78f3da2f65ba14571b9710a0cfa02d72bf4ceb0db2e792516ae70292968520faaf2f84224b95e45e2678181096f19e78ef7f09e638d576837098465e448c9cb61434e11de5719285657692a026653e13c142564432d5eaebecc8a0dfaf2ff98f06e6caafbe0af9c76192675ab9d5b80de878b3c6be9cb723e2f1b987a0697953e90e4a28b4f91940601a3f2d36f080625b0117f5f7e928b237d819d8993e0b677ede440311c66d7691b3bad5bb28899596d35767e6c2cf8a87cf84a2dcc8aa8bd181a1cb17cbb084a62368baffb51094104d0981e28a36a933cdd6e04f146d66d9e439e01694c427a6f5df587642ef8239fea15b31470109538f850faa77fe978306aaf7bba0947d692736151aedbbbb26121b8109282ee724f16bde021d0d1e141161766b3c84fb306da13078c7ebde8e39088d427c3d6f5a31d4760eebff0ff429f43a03b2f4f85bed220d5a018d34a770e687defeedd4f71f5b41a8d9f0bca1375e840b1f6797c104351c96b2b1b8324a97013cf88c31cb4b2f448b02637465c16e458ff412dd5245602add59e03e699869a3bd1f174e58c75a9d18c0f4669317f07bbf7c251117cd9c5960ca51b6cdf887cf2b4e71d0cefd44553d9a7adac27281237a546983a6d21b46cb742f6c07305aa24d60bbc4cac78c0b045a9c9f257d8b3ff717b5e8543a84f86ef3d7fbc32c2de4501c319788bdb98d804cc4e18461ed7760fcafb3d48e33f0f9ec9f3980ba173e0dbfafc64912cc955621bfd202b90eca7311087c212e11d5e7d714fa09e8bd881b40ebf47389e88b868f525ea5c66f481c26d8d6700e1553328c6fed5ffd33918527a849fd7ca2deadee00062782a04c42f356096c08bf2be2d64baf088d44116c9e70d17fc397cca2b6ac60e8b76de3962156b3aae35cc6362a7b53f36ea8a61b0677827699a3a5b77a0ff5724ab64f144fa57cc5ea67810257d3b5a8e95b2350a96711dab8ad4c895a5a579d97a845da2415d2623557fd2af6a76353763940bf31784b74605abbb045c8197b52580e9c66a01bde0af4c2fb85bdf8a13d72832820c9edc06d121d367a5b56d907303eaabd92c34b429375b60ae15ab5dbc9d3393087378358300fb9a47770bb21852f09bd4356e9b2cdcb4a67b5cf1f0b3af055aabb3c49f70f60e9543deddf43c9d31ce06792e952e25ecd75118c5c4722a08f1d302b66f61dbfca3124f2f30af5ee311aa411713391bdcb68aa27184204a97470da7afad7e7c248eff45fc06a03af4df09aa13f20f30f938e953b99f045b05fd391b0e47f596bb1353a6f7ce8a9ac590ffed37098a7fea645aeb76558d2954d02249d9c202c105af31375ed076e6742b740281610d444fe3a128da23598e43d6656e01e917ae3008e6a0d24c2bbc934d10fca90d58a3715908331b1e4f6162db4b5f9e339a70d83efeb510f92b932ff4e31e1bb5dc773e88731284e60d75b8d1c8d61c08f97d00f30e5a4cc37fe4327a3b32d099e9ffc83e9107fa115c4d28fc5810e1d75bdd226e707db4cab4b32080b930f77ceef7e54c150011a0c2719f04e78ef4fa3e063aa925796ee49be839c3fd004b99ae717ab6a6aa4ac0b4803aee1e0ee243dc9e7de8b3bade0270d78bb7dedfca90badce995deafd487ef21ff039e40d2b27ab7a9fe6ed3b02083961d637aa02bff9d38cf82123996db0792ed40159fb4f137755eda64bd63905a41488a40b90a55c4b0fe6a6a31c033218da05b389c0ecaddc77fbab9bfb440f182f06931a01c47a57b00d7be15e7bcd69d6cfac548564347a42b22486f67c68340a66d3317ae44bbaaa6456a5943b6ab50adc675f0c9968a950cd42decebff7a6b180a2efef97188dc1c6b693381a0677bd74a0ee288d63594f414c028bd2f923613930e060181138b857e4dfa818bf2e7352d2f8537c8aec26f8af172a084b4bd2d78311c332e218966e8cec0c72b71df8b42376545ce9a9a1bb23db25c5323a52c1f237c9a0f109144f945a5bb91b17632276ba36f4b86c9723d74bc94112520eff57cbcd600e8679f0b1724a8324a8c87f076310f9ddb99ebd1c1316a3629eaa487813ca2fe0d043be98cd64183eaf1985631f06678d1e94ffdb05648607e266ca9f55c9e0e0bd700690e635eb8ac078029744ff801ee609e647eb5d472579c2e6cd80c51e0b33208760dceb4f4efd810d8a70cd9b115b149e77cc939ba9d2f8c21d8f751c6eada78be0cf800358dce418d7830d8111fb8e5031c3b8fad6cfac8f846b7ffd189b6ee0c57db470c8105115ef29c399c01ebba84336ee3ad2f12ec184b4b3b144fed4ad29d7668be0a7d8ee64e4d252cab327c75330b94371fa459b675180f2fce62d8acba37c3a8a05ca174300543f5dc42ffb566fa707044d206eb6853205e336c05874d866d6682b435d77471b714072300b4847609441a84507500b1cabe0f4640827c0bf22eb664c8c28673707f8c8afcef945ae8b26b66b96725fc812155cb8f1e9d94ee37827d29fafad80f18c5a5c56f3cce83e24eb97b0ac9a03f954aade2a09e1580dc0534dc440c9cfd8966020c7d23716f1f3638626181b1629e62042ba4193cfc5b483d7ab4bdd7b23f8e6a85227db14901c87e27833d84788d9c2090a31903f8564ad9e58e30acfb4785a4d9366bcf91ca4d37624466a0e0e536b82124ed77158f0dcce9521904e1c5a94cb168cf8975d3191287ade547beae08c7add5b8c4bbfbb2f6fe58a90dee44c4b27798c5775755eeb3ffaf8a3196678161b14daff88673678a0f3660a02bcf10a2f706f9ee1b1213b03c66f3b79fe89d7e0bdf854ba17b1395c697ea468065481af87e34c86f25c3e273fc3f20829100c17432955fec9a389d9e251a954807eac808f3cb31a60358726296b7c0d8f77064b0dc83d4f0de7ed6b9e13bd93e0b2f367fa3e2085bbac6b9cc6d70af8b0a8d91eb895365054a10de8e9451e83a3487a201dc0a51ad7a71a4e770115bd5be069ec38395cc79e5094897abc3259656ee3a851f58fd764ff26936cd9a929dbe798e1ae70520b481926e0019414051f6a6809fadee1731b2be89eeb2597adbdc90220ace60dfcef3915aafffeebd68de66fdcaca11387228e67bef350098ef67fbb2bedf740c73d85b0002e24bb3cd98533be5f4ac83a5a59643a24a71abb46bac5b75948d629c159f92a68aa418e44b2b09e34eeb1982c12f6d5c4baff9764ec820c7b2a5f8710f727556a3f183265ed40086eb3d05d0317c3f88f6883ae37b73f04f467a289838c78e59e7187ee4d01a811935529d190b52cf4bba9306873d517fb8ebbfe427121f9f7c52d0f12f17858a718fe43c2760a0da45b490d309800006c0af60f8892fe7ab9fd2482064ab63dc0e005229aeb8ae8443614c02bae0f4d0eb1334e9c98b74cebd335a981bf3c0760b4e68644ffab9f4cf81caa3eec3fac234a8eaea6279f0294eac8a0bba6a371554787fa9e18771b8dddd74574af4fef79"}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x5e, 0x1b, '\x00', [@generic={0xff, 0x22, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c3"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x4c, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x12f0}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000540), 0x7, 0x4080) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.010085885s ago: executing program 1 (id=2576): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = dup(r4) accept4(r5, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f0000000680)={0x67446698, 0x0, 0x0, 0x4, 0x3, "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"}, 0x10b) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x111, 0x3}}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0194c4e20991c75f5b00ffffffff030000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000034fb3d32d9a688ba5d2e62e34127ae77701d4ac37c2ac"], 0x34}, 0x1, 0x0, 0x0, 0x24040060}, 0x2000081c) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1f4, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8566}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7f, 0xa8, @random="768d415fc8b2dc4d235adb6e5032c541de1969a18fdb0c15e5737525e72156d3cabdbbb72b2548f1f5610d071baa1c278542b093c759414d7cb441e0bcae34187bbcb6d7479ef88f7821957dca58bff0bd63924bcc23ea2cc5d537041c4af217bf70f85c2dc347e59dd583fe3ed0dc7380eddb356133b476e771e8"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x833}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xdc, 0xa9, @random="65b461f3845cebeb6393acd4a56f63ab687db639dcc3e36384face0b8d46e6221a82cafb05982b9a1a95c3f3b73d9d84bef5fc1dc022ee1556a9e6046faf1d1fac845b0712f34caba87588aa3541ce8249570d5483c4f918b5cda2ffb764cb29a914572f24e51a173295824d34864e24a5799220abfcdbc6e949da8ae9f786211a328e709b56dcaeabc8bae98b28415675b7a7bcd90560320cccdf8ba87aa26b733c9abcf75d38471c55d96bf5f30e796c85976fefd897018b24d341969fbe3937fe77b91aa4b9a367c9288d70cf52991ea752fff96c92cc"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fffffff}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) close(r0) 1.951097081s ago: executing program 1 (id=2577): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000300)=@v={0x93, 0x3, 0x80, 0x0, @generic}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000540)=""/40, 0x28}], 0x6, &(0x7f0000000680)=""/232, 0xe8}, 0x200) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0xfff, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[r1, r1, r0, r0, r0, r0, r1]}, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1.890958179s ago: executing program 1 (id=2580): syz_open_pts(0xffffffffffffffff, 0xc0) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000004e0000004e3500004ef8742ede98fd4d77adc450003fe4c8a6120b5746562f67bb340d6bee26b9a5a07544f40648c80e1aed9175d3a87b7d1f06ac0d0732f4e555ddcef10000007f42abd41c64f0f1"]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000000)=0x4000e, 0x2f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet6_int(r3, 0x29, 0x48, 0x0, &(0x7f00007d0000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a1000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.57037153s ago: executing program 2 (id=2592): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x202d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000020000006110040000000000950000000000000095000000000000009f1d52584fcfe3a441dda6d794b72c7bce1da33ad46a853eace93c399be4f1926d53a68b4ca023f68d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x9, 0x6, 0x6, 0x8, 0xf1, "2b46c6cfd7233e381108cc0c57f499b2f52935", 0x0, 0xfffffffb}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, r4, 0x1, 0x4000003, 0x0, {{}, {}, {0x5, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000300)="0f01c266ba2000b0abee66baf80cb88c70848bef66bafc0cb8c61d0000ef460f052ef242d1ee660f388164bf04c7442400c1000000c7442402a98f0000c7442406000000000f011c24b9ae090000b800680000ba000000000f30460f308fc9309818", 0x62}], 0x1, 0x20, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r9, 0x80705864, &(0x7f0000000200)) r10 = socket$inet(0x2, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r10, 0x0, 0x484, &(0x7f0000000140)=""/120, &(0x7f0000000000)=0x78) ioctl$KVM_RUN(r8, 0xae80, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x6) 1.315533847s ago: executing program 2 (id=2593): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc", 0x40}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x5e, 0x18, '\x00', [@generic={0xff, 0x22, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c3"}, @padn={0x1, 0x1, [0x0]}, @pad1, @padn, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0x4c, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b"}, @jumbo={0xc2, 0x4, 0xbf0c}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@private0, @mcast2]}}}], 0x1f8}}], 0x1, 0x810) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r7, 0x0, 0x0, 0x800) 1.098159738s ago: executing program 6 (id=2598): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x1, {0x0, 0x1, 0x4}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a002300000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="bbbc857b2059706e0a53f4da", 0xc}, {&(0x7f0000000080)="df49c2997cc96ae6c5d0fae11ee97386a1407a56befbafd638f47a2ea10a92de72cdaf9a61daa3ef7e19cea3c730dbb08004a6d6fdef9116ea78d0ce7e78537fa45117a185e83f6f1522a6b5ea6579e35e9912d421b6f89089a51c552aad9adfe45ac4799559b65e36498b45101ef55cfb262e50be0e7013fa065b7166492f5ca425e4104f098cc67c47", 0x8a}, {&(0x7f0000000140)="50dc9e91cb0ffbc1f7e3789d47efebdb5fb3869f8887dae5736767003039ba02ce3cac30b89b9779c2498e3cf87552f64135be5346fae9819957cf49eb7aee0cacde8fd169b11ca4dd1314eb448e3973a83c100142a6f83d711b18b92a5f7e28c6b7bfd844869170f2fd3daaffec8e59f6883637634d8e6bb4b2f2417e09c8077e85a112e558474d1e7dc9f5695132718c40a293db019f14d6edfe07936e44acd8b4c0ed0713e8630bf44acec1b43c6500a6923ae82719bb7932be6baac9b4caee55ba8f4140e8f4c445324ae72d0e59a3b4e2125ff573", 0xd7}, {&(0x7f0000000240)="a293f16ba3d30e32349f668768b1330f70ade6af6557d07fa468055ae6644ead52a56cee03f12cc5b982ed6ab240f1136450d4ca1feb2cec39f38a427863c0d61b1076f5b2411efac8aa8596d5", 0x4d}], 0x4}, 0x20004004) 1.000869179s ago: executing program 2 (id=2599): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) personality(0xfe47fef9f5ff7379) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x3c, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty, [], "2b2888be6783937f22d39b28"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/192, 0xc0}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f0000000240)=""/243, 0xf3}], 0x4) personality(0x4000009) 994.180747ms ago: executing program 6 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) stat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x92b, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x4) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="42f2d226dfbf55c6ebc9d4ba14698c2ec0416b3cb15f0b947b9e046bd3c42dcc8b", 0x21, r0) 994.009664ms ago: executing program 6 (id=2601): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_emit_ethernet(0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001400), 0x1, 0x2001) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001440)=""/1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 921.3238ms ago: executing program 2 (id=2602): r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) (async) syz_io_uring_setup(0x832, &(0x7f0000000280)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xfffffff7}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)={0x40000009}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x2, '\x00', &(0x7f0000000100)=0xf7}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB='\f\x00\x00'], 0x3c}}, 0x20000000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d000300"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f0000000040)=0x8) 834.762736ms ago: executing program 2 (id=2603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, 0x0, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc004) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0xfffffdd7, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x800) 834.655931ms ago: executing program 2 (id=2604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) poll(&(0x7f0000000180)=[{r0, 0x21}], 0x1, 0xa692) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) write$cgroup_int(r0, &(0x7f0000000240)=0x8, 0x12) 401.005188ms ago: executing program 4 (id=2607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000100)=0xda, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x5e21, 0x402, 0xa, 0x80, 0x0, 0x3a}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x5, 0x2}, 0x70bd2c, 0x3501, 0xa, 0x1, 0x0, 0x50}, [@tfcpad={0x8, 0x16, 0x4}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000800) r6 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@cpuid={0x64, 0x18, {0xb, 0x1}}], 0x18}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x8000, 0x8000, 0x4, 0x400, 0x0}, &(0x7f0000000040)=0x10) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0xfffe}) fremovexattr(r8, &(0x7f0000000000)=@known='system.posix_acl_default\x00') write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000140)={0x1, 0x24}, 0x2) ioprio_set$pid(0x1, 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0xffffffffffffff49, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0xb8}}, 0x0) sendfile(r9, r9, 0x0, 0x24002de8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r7, 0x6c4}, 0x8) 111.33128ms ago: executing program 4 (id=2608): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 110.604281ms ago: executing program 4 (id=2609): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000040)={0x4, 0x2}, 0x8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 109.593643ms ago: executing program 6 (id=2610): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000040000701feffffff0000000001780000040042800c00018006000600800a0000140002800d001480040005"], 0x38}, 0x1, 0x0, 0x0, 0x488d5}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0xc02258391c7bb7ad}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x193}], 0x1) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) r5 = socket$l2tp6(0xa, 0x2, 0x73) accept$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000480)={0x2, 0xfffffffc, 0x6, 0x2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syslog(0xa, &(0x7f0000000080), 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r9}) syz_emit_ethernet(0x7a, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa808100100086dd60f53a0400403a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000050060000000004000fffc010000000000000000000000000000fc02000000000000000000000000e2003a00000000000000f4c638bed6f068ccc561699ba784915a7244041ab4c2aed22cf5ca85ee0c084a1e527e441301354306f44ca12054a38c1d359810600f8b713eac3a2955205a6f310fa9cf21f47f4d26a8377a34b3e997d599335189221ff9f2c5649c487359f03429ab1f7b3236bbce46b53469b1a2fce24e062eb85c03233f97d15a1f4b1aaac4a51155b9161deeaac0e9fb722895c64af398b552e5ca0d26b3fa05430a1e2453f14811be"], 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 51.223354ms ago: executing program 4 (id=2611): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x33) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000001000", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x6]}}) 50.342088ms ago: executing program 6 (id=2612): setresuid(0x0, 0xee00, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f00000005c0)='%'}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x5c3, 0x7ffffffa}) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4c22, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setresuid(0x0, 0xee00, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0x4) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f00000005c0)='%'}) (async) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x5c3, 0x7ffffffa}) (async) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) (async) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4c22, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) 1.025533ms ago: executing program 6 (id=2613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0x0, 0xfff2}, {0x6, 0xf}}, [{0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 690.002µs ago: executing program 4 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$nl_crypto(r1, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, 0x0) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES64=r0, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="de3b58f8c6ff4338e9c3d71ade1ec6ec6ba08b7c5fcef060ca8dd6e101f14152cecb9417d9d453894a10bfd49b8305432087c6ceba937ec2fe08bb9316524900f134e5ebd3d9f242916aff4530063d469aca08ab93bbfc89d88c600cebec6c9ab7363ed91e025f0ae3c28e846c3cb408d2f458e35f82b41d856d81a05fdfeec5a88674bb19c7a15441f7146ab7eb0dd5e9a777413174c2993eb88d89286865196ca2ee13b1241ee4b179b937430a77f6570868d49140340cd737b3cd3d7491dea7e3985a7ea298a1e59d928a69f2f7798f5ebc27cc2b9ef396a90a69c8cc68e110465db82994423bd6861c1c1182f1ea3240cda06520", @ANYRES8, @ANYRESHEX=r2, @ANYRESOCT=r0], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc010) 0s ago: executing program 4 (id=2615): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000040)=[r1], &(0x7f0000000280), 0xc, 0x3ffffffffffffd10}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x4008af25, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x6, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000bdfdfa1f6c89752cd41578d46b4e1688abe06391c3000037c939f393bd994d46028ecd32afe423302c45bf2f780fe90f160b0e828e75ab941c21952cc8956b2d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0xff0c, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 225.084850][T12264] lo speed is unknown, defaulting to 1000 [ 225.110744][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1853'. [ 225.162343][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1857'. [ 225.213998][T12281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1859'. [ 225.278535][ T40] audit: type=1400 audit(1771356120.415:770): avc: denied { lock } for pid=12280 comm="syz.4.1859" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 225.876543][T12286] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 225.881089][ T40] audit: type=1400 audit(1771356121.025:771): avc: denied { relabelto } for pid=12285 comm="syz.1.1860" name="498" dev="tmpfs" ino=2668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 225.892623][ T40] audit: type=1400 audit(1771356121.025:772): avc: denied { associate } for pid=12285 comm="syz.1.1860" name="498" dev="tmpfs" ino=2668 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 225.987271][T12286] hid-generic 0003:0627:0001.0001: pid 12286 passed too large report [ 226.006619][ T40] audit: type=1400 audit(1771356121.135:773): avc: denied { name_bind 0x1000000 } for pid=12293 comm="syz.3.1863" path="socket:[45714]" dev="sockfs" ino=45714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.018569][ T40] audit: type=1400 audit(1771356121.155:774): avc: denied { remove_name } for pid=5929 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 226.027474][ T40] audit: type=1400 audit(1771356121.155:775): avc: denied { rmdir } for pid=5929 comm="syz-executor" name="498" dev="tmpfs" ino=2668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 226.041019][T12298] program syz.1.1864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.155189][T12310] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 226.193604][T12315] autofs: Unknown parameter 'mountinfo' [ 226.228903][T12318] /dev/nullb0: Can't open blockdev [ 226.233576][T12318] comedi comedi3: comedi_config --init_data is deprecated [ 226.237234][ T6013] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 226.267616][T12320] FAULT_INJECTION: forcing a failure. [ 226.267616][T12320] name failslab, interval 1, probability 0, space 0, times 0 [ 226.272758][T12320] CPU: 3 UID: 0 PID: 12320 Comm: syz.3.1871 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.272782][T12320] Tainted: [L]=SOFTLOCKUP [ 226.272787][T12320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.272796][T12320] Call Trace: [ 226.272803][T12320] [ 226.272810][T12320] dump_stack_lvl+0x100/0x190 [ 226.272838][T12320] should_fail_ex.cold+0x5/0xa [ 226.272858][T12320] ? tomoyo_realpath_from_path+0xb6/0x690 [ 226.272891][T12320] should_failslab+0xc2/0x120 [ 226.272912][T12320] __kmalloc_noprof+0xe0/0x850 [ 226.272936][T12320] tomoyo_realpath_from_path+0xb6/0x690 [ 226.272956][T12320] tomoyo_path_number_perm+0x23c/0x580 [ 226.272977][T12320] ? tomoyo_path_number_perm+0x22e/0x580 [ 226.272999][T12320] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 226.273042][T12320] ? find_held_lock+0x2b/0x80 [ 226.273060][T12320] ? __fget_files+0x215/0x3d0 [ 226.273080][T12320] ? hook_file_ioctl_common+0x146/0x410 [ 226.273103][T12320] ? __fget_files+0x21f/0x3d0 [ 226.273128][T12320] security_file_ioctl+0xd3/0x230 [ 226.273152][T12320] __x64_sys_ioctl+0xb7/0x210 [ 226.273173][T12320] do_syscall_64+0x106/0xf80 [ 226.273194][T12320] ? clear_bhb_loop+0x40/0x90 [ 226.273212][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.273227][T12320] RIP: 0033:0x7fbd7059c139 [ 226.273241][T12320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.273256][T12320] RSP: 002b:00007fbd7150f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.273271][T12320] RAX: ffffffffffffffda RBX: 00007fbd70815fa0 RCX: 00007fbd7059c139 [ 226.273282][T12320] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 226.273291][T12320] RBP: 00007fbd7150f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.273300][T12320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.273309][T12320] R13: 00007fbd70816038 R14: 00007fbd70815fa0 R15: 00007ffda1897058 [ 226.273331][T12320] [ 226.273339][T12320] ERROR: Out of memory at tomoyo_realpath_from_path. [ 226.349069][T12320] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 226.421487][T12327] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 226.421809][T12328] netlink: 'syz.1.1874': attribute type 1 has an invalid length. [ 226.433917][T12327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.441342][T12327] vlan3: entered promiscuous mode [ 226.442998][T12327] bond5: entered promiscuous mode [ 226.444700][T12327] vlan3: entered allmulticast mode [ 226.446372][T12327] bond5: entered allmulticast mode [ 226.448939][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.452416][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.455596][ T6013] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.460319][ T6013] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.463194][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.467592][ T6013] usb 7-1: config 0 descriptor?? [ 226.720156][T12334] xt_hashlimit: size too large, truncated to 1048576 [ 226.720156][T12335] xt_hashlimit: size too large, truncated to 1048576 [ 226.763072][T11178] net_ratelimit: 12 callbacks suppressed [ 226.763090][T11178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.888124][ T6013] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 226.917153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.193743][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1876'. [ 227.317264][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.397368][T11173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.418021][T11173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.908632][T12350] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 227.932167][T12352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 227.936793][T12352] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 227.945954][T12352] CIFS mount error: No usable UNC path provided in device string! [ 227.945954][T12352] [ 227.949442][T12352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 227.951618][ T40] audit: type=1400 audit(1771356123.085:776): avc: denied { read } for pid=12353 comm="syz.1.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.957161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.957808][T12352] syz.3.1880: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 227.958801][T12352] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 227.982798][T12358] FAULT_INJECTION: forcing a failure. [ 227.982798][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 227.989048][T12358] CPU: 1 UID: 0 PID: 12358 Comm: syz.1.1882 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.989077][T12358] Tainted: [L]=SOFTLOCKUP [ 227.989082][T12358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.989093][T12358] Call Trace: [ 227.989098][T12358] [ 227.989104][T12358] dump_stack_lvl+0x100/0x190 [ 227.989153][T12358] should_fail_ex.cold+0x5/0xa [ 227.989175][T12358] ? tomoyo_encode2+0xfb/0x3c0 [ 227.989201][T12358] should_failslab+0xc2/0x120 [ 227.989225][T12358] __kmalloc_noprof+0xe0/0x850 [ 227.989245][T12358] ? d_absolute_path+0x136/0x1b0 [ 227.989270][T12358] tomoyo_encode2+0xfb/0x3c0 [ 227.989290][T12358] tomoyo_encode+0x29/0x50 [ 227.989305][T12358] tomoyo_realpath_from_path+0x18c/0x690 [ 227.989327][T12358] tomoyo_path_number_perm+0x23c/0x580 [ 227.989351][T12358] ? tomoyo_path_number_perm+0x22e/0x580 [ 227.989381][T12358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 227.989430][T12358] ? find_held_lock+0x2b/0x80 [ 227.989451][T12358] ? __fget_files+0x215/0x3d0 [ 227.989474][T12358] ? hook_file_ioctl_common+0x146/0x410 [ 227.989499][T12358] ? __fget_files+0x21f/0x3d0 [ 227.989527][T12358] security_file_ioctl+0xd3/0x230 [ 227.989554][T12358] __x64_sys_ioctl+0xb7/0x210 [ 227.989577][T12358] do_syscall_64+0x106/0xf80 [ 227.989611][T12358] ? clear_bhb_loop+0x40/0x90 [ 227.989631][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.989648][T12358] RIP: 0033:0x7fd04039c139 [ 227.989662][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.989677][T12358] RSP: 002b:00007fd041203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.989693][T12358] RAX: ffffffffffffffda RBX: 00007fd040615fa0 RCX: 00007fd04039c139 [ 227.989704][T12358] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 227.989714][T12358] RBP: 00007fd041203090 R08: 0000000000000000 R09: 0000000000000000 [ 227.989723][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.989731][T12358] R13: 00007fd040616038 R14: 00007fd040615fa0 R15: 00007ffcfb3314e8 [ 227.989753][T12358] [ 227.989770][T12358] ERROR: Out of memory at tomoyo_realpath_from_path. [ 228.005408][ T40] audit: type=1400 audit(1771356123.135:777): avc: denied { watch_sb } for pid=12359 comm="syz.3.1883" path="/422" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 228.008951][T12358] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 228.125689][T12367] unsupported nla_type 4111 [ 228.179947][T12370] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 228.182592][T12370] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.185439][T12370] vhci_hcd vhci_hcd.0: Device attached [ 228.357616][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.362426][T12379] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 228.410649][T12383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1891'. [ 228.427236][ T6012] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 228.434592][ T5902] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 228.494823][T12394] FAULT_INJECTION: forcing a failure. [ 228.494823][T12394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.499604][T12394] CPU: 2 UID: 0 PID: 12394 Comm: syz.3.1894 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.499622][T12394] Tainted: [L]=SOFTLOCKUP [ 228.499626][T12394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.499632][T12394] Call Trace: [ 228.499636][T12394] [ 228.499641][T12394] dump_stack_lvl+0x100/0x190 [ 228.499662][T12394] should_fail_ex.cold+0x5/0xa [ 228.499691][T12394] _copy_from_user+0x2e/0xd0 [ 228.499704][T12394] do_devconfig_ioctl+0x11e/0x6d0 [ 228.499727][T12394] ? comedi_unlocked_ioctl+0x163/0x2e70 [ 228.499739][T12394] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 228.499765][T12394] ? find_held_lock+0x2b/0x80 [ 228.499780][T12394] comedi_unlocked_ioctl+0x44c/0x2e70 [ 228.499793][T12394] ? tomoyo_path_number_perm+0x188/0x580 [ 228.499812][T12394] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 228.499827][T12394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 228.499842][T12394] ? do_vfs_ioctl+0x226/0x13e0 [ 228.499856][T12394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 228.499869][T12394] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 228.499891][T12394] ? __fget_files+0x215/0x3d0 [ 228.499907][T12394] ? hook_file_ioctl_common+0x146/0x410 [ 228.499923][T12394] ? selinux_file_ioctl+0x139/0x290 [ 228.499932][T12394] ? selinux_file_ioctl+0xb4/0x290 [ 228.499943][T12394] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 228.499955][T12394] __x64_sys_ioctl+0x18e/0x210 [ 228.499970][T12394] do_syscall_64+0x106/0xf80 [ 228.499984][T12394] ? clear_bhb_loop+0x40/0x90 [ 228.499997][T12394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.500008][T12394] RIP: 0033:0x7fbd7059c139 [ 228.500017][T12394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.500027][T12394] RSP: 002b:00007fbd7150f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.500038][T12394] RAX: ffffffffffffffda RBX: 00007fbd70815fa0 RCX: 00007fbd7059c139 [ 228.500044][T12394] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 228.500050][T12394] RBP: 00007fbd7150f090 R08: 0000000000000000 R09: 0000000000000000 [ 228.500056][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.500062][T12394] R13: 00007fbd70816038 R14: 00007fbd70815fa0 R15: 00007ffda1897058 [ 228.500076][T12394] [ 228.560657][T11175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.598467][ T6012] usb 6-1: config 5 has no interfaces? [ 228.600273][ T6012] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 228.603300][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.689194][T11175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.718738][ T40] audit: type=1400 audit(1771356123.855:778): avc: denied { write } for pid=12399 comm="syz.3.1897" path="socket:[49240]" dev="sockfs" ino=49240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 228.719929][T12402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.726365][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 228.812901][T12371] usb 39-1: recv xbuf, 0 [ 228.820455][T11179] vhci_hcd vhci_hcd.1: stop threads [ 228.822743][T11179] vhci_hcd vhci_hcd.1: release socket [ 228.825404][T11179] vhci_hcd vhci_hcd.1: disconnect device [ 228.836575][ T6012] usb 6-1: USB disconnect, device number 14 [ 228.871092][ T834] usb 7-1: USB disconnect, device number 29 [ 228.883765][T12405] kvm: kvm [12404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 228.886998][T12405] kvm: kvm [12404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 228.905814][T12405] kvm: kvm [12404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 228.907358][ T5902] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 228.925824][T12405] kvm: kvm [12404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 228.930085][T12405] kvm: kvm [12404]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 229.007280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.532400][T12427] FAULT_INJECTION: forcing a failure. [ 229.532400][T12427] name failslab, interval 1, probability 0, space 0, times 0 [ 229.536367][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.1.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.536413][T12427] Tainted: [L]=SOFTLOCKUP [ 229.536416][T12427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.536423][T12427] Call Trace: [ 229.536428][T12427] [ 229.536433][T12427] dump_stack_lvl+0x100/0x190 [ 229.536453][T12427] should_fail_ex.cold+0x5/0xa [ 229.536469][T12427] ? comedi_alloc_devpriv+0x22/0x60 [ 229.536482][T12427] should_failslab+0xc2/0x120 [ 229.536499][T12427] __kmalloc_noprof+0xe0/0x850 [ 229.536512][T12427] ? cred_has_capability.isra.0+0x186/0x300 [ 229.536532][T12427] comedi_alloc_devpriv+0x22/0x60 [ 229.536547][T12427] pcl812_attach+0x52/0x22d0 [ 229.536565][T12427] comedi_device_attach+0x3d2/0x660 [ 229.536582][T12427] do_devconfig_ioctl+0x1b3/0x6d0 [ 229.536600][T12427] ? comedi_unlocked_ioctl+0x163/0x2e70 [ 229.536612][T12427] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 229.536637][T12427] ? find_held_lock+0x2b/0x80 [ 229.536653][T12427] comedi_unlocked_ioctl+0x44c/0x2e70 [ 229.536665][T12427] ? tomoyo_path_number_perm+0x188/0x580 [ 229.536684][T12427] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 229.536699][T12427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.536714][T12427] ? do_vfs_ioctl+0x226/0x13e0 [ 229.536728][T12427] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 229.536742][T12427] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.536764][T12427] ? __fget_files+0x215/0x3d0 [ 229.536779][T12427] ? hook_file_ioctl_common+0x146/0x410 [ 229.536795][T12427] ? selinux_file_ioctl+0x139/0x290 [ 229.536804][T12427] ? selinux_file_ioctl+0xb4/0x290 [ 229.536815][T12427] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 229.536827][T12427] __x64_sys_ioctl+0x18e/0x210 [ 229.536842][T12427] do_syscall_64+0x106/0xf80 [ 229.536857][T12427] ? clear_bhb_loop+0x40/0x90 [ 229.536871][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.536882][T12427] RIP: 0033:0x7fd04039c139 [ 229.536891][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.536901][T12427] RSP: 002b:00007fd041203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.536913][T12427] RAX: ffffffffffffffda RBX: 00007fd040615fa0 RCX: 00007fd04039c139 [ 229.536919][T12427] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 229.536925][T12427] RBP: 00007fd041203090 R08: 0000000000000000 R09: 0000000000000000 [ 229.536931][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.536937][T12427] R13: 00007fd040616038 R14: 00007fd040615fa0 R15: 00007ffcfb3314e8 [ 229.536951][T12427] [ 230.074490][T12438] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 230.169867][T12447] dlm: no locking on control device [ 230.187915][T12438] lo speed is unknown, defaulting to 1000 [ 230.332065][T12457] FAULT_INJECTION: forcing a failure. [ 230.332065][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 230.340291][T12457] CPU: 1 UID: 0 PID: 12457 Comm: syz.4.1915 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.340320][T12457] Tainted: [L]=SOFTLOCKUP [ 230.340327][T12457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.340338][T12457] Call Trace: [ 230.340344][T12457] [ 230.340350][T12457] dump_stack_lvl+0x100/0x190 [ 230.340415][T12457] should_fail_ex.cold+0x5/0xa [ 230.340436][T12457] should_failslab+0xc2/0x120 [ 230.340460][T12457] __kmalloc_cache_noprof+0x7a/0x6f0 [ 230.340477][T12457] ? __request_region+0x5c/0xf0 [ 230.340502][T12457] ? trace_kmalloc+0x101/0x130 [ 230.340529][T12457] __request_region+0x5c/0xf0 [ 230.340555][T12457] comedi_request_region+0x6d/0x100 [ 230.340580][T12457] pcl812_attach+0xa2/0x22d0 [ 230.340610][T12457] comedi_device_attach+0x3d2/0x660 [ 230.340640][T12457] do_devconfig_ioctl+0x1b3/0x6d0 [ 230.340673][T12457] ? comedi_unlocked_ioctl+0x163/0x2e70 [ 230.340694][T12457] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 230.340738][T12457] ? find_held_lock+0x2b/0x80 [ 230.340765][T12457] comedi_unlocked_ioctl+0x44c/0x2e70 [ 230.340785][T12457] ? tomoyo_path_number_perm+0x188/0x580 [ 230.340816][T12457] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.340842][T12457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.340867][T12457] ? do_vfs_ioctl+0x226/0x13e0 [ 230.340890][T12457] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 230.340912][T12457] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 230.340950][T12457] ? __fget_files+0x215/0x3d0 [ 230.340975][T12457] ? hook_file_ioctl_common+0x146/0x410 [ 230.341003][T12457] ? selinux_file_ioctl+0x139/0x290 [ 230.341019][T12457] ? selinux_file_ioctl+0xb4/0x290 [ 230.341038][T12457] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 230.341060][T12457] __x64_sys_ioctl+0x18e/0x210 [ 230.341083][T12457] do_syscall_64+0x106/0xf80 [ 230.341103][T12457] ? clear_bhb_loop+0x40/0x90 [ 230.341124][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.341140][T12457] RIP: 0033:0x7fcd6039c139 [ 230.341153][T12457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.341166][T12457] RSP: 002b:00007fcd61300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.341183][T12457] RAX: ffffffffffffffda RBX: 00007fcd60615fa0 RCX: 00007fcd6039c139 [ 230.341192][T12457] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 230.341203][T12457] RBP: 00007fcd61300090 R08: 0000000000000000 R09: 0000000000000000 [ 230.341213][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.341222][T12457] R13: 00007fcd60616038 R14: 00007fcd60615fa0 R15: 00007fff6b4f13c8 [ 230.341249][T12457] [ 230.341260][T12457] comedi comedi3: pcl812: I/O port conflict (0x83fb,16) [ 230.427473][T12464] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1916'. [ 230.460636][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 230.477406][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1918'. [ 230.489398][T12459] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 230.505722][T12467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.525566][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 230.573714][T12477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12477 comm=syz.4.1918 [ 230.586716][T12478] vlan0: entered allmulticast mode [ 230.588598][T12478] veth0_vlan: entered allmulticast mode [ 230.602078][T12477] can: request_module (can-proto-5) failed. [ 230.642008][T12480] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1919'. [ 231.285610][T12495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.328820][T12503] xt_hashlimit: size too large, truncated to 1048576 [ 231.384823][T12506] comedi comedi3: pcl812: I/O port conflict (0x9,16) [ 231.432071][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1928'. [ 231.498204][T12517] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 231.500849][T12517] FAULT_INJECTION: forcing a failure. [ 231.500849][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 231.504193][T12519] loop1: detected capacity change from 0 to 7 [ 231.504703][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.1.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.504719][T12517] Tainted: [L]=SOFTLOCKUP [ 231.504723][T12517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.504729][T12517] Call Trace: [ 231.504733][T12517] [ 231.504737][T12517] dump_stack_lvl+0x100/0x190 [ 231.504757][T12517] should_fail_ex.cold+0x5/0xa [ 231.504771][T12517] ? comedi_alloc_subdevices+0x4a/0x240 [ 231.504785][T12517] should_failslab+0xc2/0x120 [ 231.504801][T12517] __kmalloc_noprof+0xe0/0x850 [ 231.504817][T12517] comedi_alloc_subdevices+0x4a/0x240 [ 231.504833][T12517] pcl812_attach+0xb18/0x22d0 [ 231.504851][T12517] comedi_device_attach+0x3d2/0x660 [ 231.504868][T12517] do_devconfig_ioctl+0x1b3/0x6d0 [ 231.504885][T12517] ? comedi_unlocked_ioctl+0x163/0x2e70 [ 231.504897][T12517] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 231.504922][T12517] ? find_held_lock+0x2b/0x80 [ 231.504938][T12517] comedi_unlocked_ioctl+0x44c/0x2e70 [ 231.504950][T12517] ? tomoyo_path_number_perm+0x188/0x580 [ 231.504969][T12517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 231.504984][T12517] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.504999][T12517] ? do_vfs_ioctl+0x226/0x13e0 [ 231.505013][T12517] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 231.505026][T12517] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 231.505049][T12517] ? __fget_files+0x215/0x3d0 [ 231.505063][T12517] ? hook_file_ioctl_common+0x146/0x410 [ 231.505080][T12517] ? selinux_file_ioctl+0x139/0x290 [ 231.505089][T12517] ? selinux_file_ioctl+0xb4/0x290 [ 231.505099][T12517] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 231.505112][T12517] __x64_sys_ioctl+0x18e/0x210 [ 231.505126][T12517] do_syscall_64+0x106/0xf80 [ 231.505140][T12517] ? clear_bhb_loop+0x40/0x90 [ 231.505153][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.505163][T12517] RIP: 0033:0x7fd04039c139 [ 231.505173][T12517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.505183][T12517] RSP: 002b:00007fd041203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.505194][T12517] RAX: ffffffffffffffda RBX: 00007fd040615fa0 RCX: 00007fd04039c139 [ 231.505200][T12517] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 231.505206][T12517] RBP: 00007fd041203090 R08: 0000000000000000 R09: 0000000000000000 [ 231.505212][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.505217][T12517] R13: 00007fd040616038 R14: 00007fd040615fa0 R15: 00007ffcfb3314e8 [ 231.505233][T12517] [ 231.603005][ T5929] Dev loop1: unable to read RDB block 7 [ 231.604909][ T5929] loop1: unable to read partition table [ 231.606829][ T5929] loop1: partition table beyond EOD, truncated [ 231.618795][T12519] Dev loop1: unable to read RDB block 7 [ 231.620708][T12519] loop1: unable to read partition table [ 231.622665][T12519] loop1: partition table beyond EOD, truncated [ 231.626325][T12523] netlink: 'syz.1.1936': attribute type 16 has an invalid length. [ 231.627177][T12519] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 231.656971][T12525] tmpfs: Bad value for 'mpol' [ 231.660571][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 231.660582][ T40] audit: type=1400 audit(1771356126.795:780): avc: denied { create } for pid=12524 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.668929][ T40] audit: type=1400 audit(1771356126.805:781): avc: denied { getopt } for pid=12524 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 231.727974][T12528] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 231.868154][T12525] lo: entered promiscuous mode [ 231.875079][ T834] lo speed is unknown, defaulting to 1000 [ 231.877891][ T834] syz0: Port: 1 Link DOWN [ 231.908220][ T40] audit: type=1400 audit(1771356127.045:782): avc: denied { ioctl } for pid=12529 comm="syz.1.1940" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 231.920255][ T40] audit: type=1400 audit(1771356127.055:783): avc: denied { append } for pid=12529 comm="syz.1.1940" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.594045][T12547] __nla_validate_parse: 2 callbacks suppressed [ 232.594061][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1944'. [ 232.644375][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 232.658950][T12555] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 232.661782][T12555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1946'. [ 232.664794][T12555] batadv0: entered promiscuous mode [ 232.666790][T12555] batadv0: entered allmulticast mode [ 232.669846][T12555] bridge0: port 2(batadv0) entered blocking state [ 232.672120][T12555] bridge0: port 2(batadv0) entered disabled state [ 232.675760][T12555] bridge0: port 2(batadv0) entered blocking state [ 232.678346][T12555] bridge0: port 2(batadv0) entered forwarding state [ 232.686150][T12553] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 232.691054][T12557] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 232.735477][T12557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.746470][T12557] bond2: (slave batadv2): Opening slave failed [ 232.776618][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 232.780556][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 232.784266][T12562] netlink: 'syz.2.1948': attribute type 11 has an invalid length. [ 232.787513][T12562] netlink: 'syz.2.1948': attribute type 7 has an invalid length. [ 232.816954][T12565] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 232.848392][T11179] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 232.851822][T11179] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.908496][T12580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=12580 comm=syz.2.1953 [ 232.992895][T12590] comedi comedi3: pcl812: I/O port conflict (0x8020,16) [ 233.026094][T12592] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 233.030415][T12592] FAULT_INJECTION: forcing a failure. [ 233.030415][T12592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.036647][T12592] CPU: 1 UID: 0 PID: 12592 Comm: syz.4.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.036672][T12592] Tainted: [L]=SOFTLOCKUP [ 233.036677][T12592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.036686][T12592] Call Trace: [ 233.036691][T12592] [ 233.036697][T12592] dump_stack_lvl+0x100/0x190 [ 233.036726][T12592] should_fail_ex.cold+0x5/0xa [ 233.036746][T12592] _copy_to_user+0x32/0xd0 [ 233.036766][T12592] simple_read_from_buffer+0xcb/0x170 [ 233.036790][T12592] proc_fail_nth_read+0x1af/0x230 [ 233.036811][T12592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.036831][T12592] ? rw_verify_area+0xce/0x6d0 [ 233.036849][T12592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.036867][T12592] vfs_read+0x1e4/0xb30 [ 233.036890][T12592] ? __pfx_vfs_read+0x10/0x10 [ 233.036909][T12592] ? __fget_files+0x215/0x3d0 [ 233.036935][T12592] ? __fget_files+0x21f/0x3d0 [ 233.036963][T12592] ksys_read+0x12a/0x250 [ 233.036982][T12592] ? __pfx_ksys_read+0x10/0x10 [ 233.037009][T12592] do_syscall_64+0x106/0xf80 [ 233.037030][T12592] ? clear_bhb_loop+0x40/0x90 [ 233.037062][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.037079][T12592] RIP: 0033:0x7fcd6035ca0e [ 233.037093][T12592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.037107][T12592] RSP: 002b:00007fcd612fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.037123][T12592] RAX: ffffffffffffffda RBX: 00007fcd613006c0 RCX: 00007fcd6035ca0e [ 233.037133][T12592] RDX: 000000000000000f RSI: 00007fcd613000a0 RDI: 0000000000000004 [ 233.037141][T12592] RBP: 00007fcd61300090 R08: 0000000000000000 R09: 0000000000000000 [ 233.037150][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.037159][T12592] R13: 00007fcd60616038 R14: 00007fcd60615fa0 R15: 00007fff6b4f13c8 [ 233.037180][T12592] [ 233.146820][ T40] audit: type=1400 audit(1771356128.275:784): avc: denied { unmount } for pid=10214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 233.167875][T12606] loop1: detected capacity change from 0 to 7 [ 233.170835][T12059] Dev loop1: unable to read RDB block 7 [ 233.176158][T12059] loop1: unable to read partition table [ 233.178491][T12059] loop1: partition table beyond EOD, truncated [ 233.181108][T12606] Dev loop1: unable to read RDB block 7 [ 233.182898][T12606] loop1: unable to read partition table [ 233.184824][T12606] loop1: partition table beyond EOD, truncated [ 233.194982][T12606] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 233.253356][T12616] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 233.272630][T12616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.364811][T12622] net_ratelimit: 9 callbacks suppressed [ 233.364823][T12622] openvswitch: netlink: Unknown key attributes 2 [ 233.399428][T12625] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 233.407375][ T1029] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 233.439934][T12629] tmpfs: Bad value for 'mpol' [ 233.559712][ T1029] usb 7-1: Using ep0 maxpacket: 8 [ 233.568820][ T1029] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 233.571481][ T1029] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.574634][ T1029] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.578223][ T1029] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.581417][ T1029] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.585622][ T1029] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.589843][ T1029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.795962][ T1029] usb 7-1: usb_control_msg returned -32 [ 233.800066][ T1029] usbtmc 7-1:16.0: can't read capabilities [ 233.938859][T12655] xt_hashlimit: size too large, truncated to 1048576 [ 234.154574][T12661] usbtmc 7-1:16.0: control status returned ff [ 234.249383][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.254060][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.259167][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.262234][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.265729][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.356409][ T5974] usb 7-1: USB disconnect, device number 30 [ 234.388198][T12668] lo speed is unknown, defaulting to 1000 [ 234.467975][T12668] chnl_net:caif_netlink_parms(): no params data found [ 234.508728][T12682] xt_hashlimit: size too large, truncated to 1048576 [ 234.518688][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.521038][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.523740][T12668] bridge_slave_0: entered allmulticast mode [ 234.526460][T12668] bridge_slave_0: entered promiscuous mode [ 234.530144][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.532606][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.534996][T12668] bridge_slave_1: entered allmulticast mode [ 234.538198][T12668] bridge_slave_1: entered promiscuous mode [ 234.555517][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.560486][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.576797][T12668] team0: Port device team_slave_0 added [ 234.580515][T12668] team0: Port device team_slave_1 added [ 234.594626][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.596875][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.607247][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.615123][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.619609][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.630880][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.669757][T12668] hsr_slave_0: entered promiscuous mode [ 234.672169][T12668] hsr_slave_1: entered promiscuous mode [ 234.674400][T12668] debugfs: 'hsr0' already exists in 'hsr' [ 234.676236][T12668] Cannot create hsr debugfs directory [ 234.776823][T12668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.777424][ T40] audit: type=1400 audit(1771356129.915:785): avc: denied { audit_write } for pid=12696 comm="syz.4.1989" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 234.790204][T12668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 234.795026][T12668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 234.800130][T12668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 234.818653][T12704] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 234.824858][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.827858][T12668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.830758][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.833421][T12668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.852567][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.855569][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.889145][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.895874][ T40] audit: type=1400 audit(1771356130.025:786): avc: denied { remount } for pid=12708 comm="syz.2.1992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 234.902050][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.911602][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.913942][T11179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.921332][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.923599][T11176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.932863][T12712] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 234.959568][T12712] bond1: (slave geneve2): making interface the new active one [ 234.962526][T12712] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 234.966970][T11176] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.970399][T11176] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.976466][T11176] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.979940][T11176] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 234.983978][T12712] netfs: Couldn't get user pages (rc=-14) [ 234.994484][ T40] audit: type=1400 audit(1771356130.125:787): avc: denied { ioctl } for pid=12711 comm="syz.2.1993" path="/70/file0/net_prio.prioidx" dev="9p" ino=72614145 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.089842][ T1167] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 235.113001][T11177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.135857][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.201213][T12724] : entered promiscuous mode [ 235.211858][ T40] audit: type=1400 audit(1771356130.345:788): avc: denied { unmount } for pid=11823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.245053][T11177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.257138][ T1167] usb 9-1: Using ep0 maxpacket: 16 [ 235.275951][T12735] program syz.2.1996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.289227][T12668] veth0_vlan: entered promiscuous mode [ 235.295242][T12668] veth1_vlan: entered promiscuous mode [ 235.322161][T12668] veth0_macvtap: entered promiscuous mode [ 235.342513][T11177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.352425][T12668] veth1_macvtap: entered promiscuous mode [ 235.367899][T12668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.382446][T12668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.391425][T11173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.397522][T11173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.401825][T11173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.404650][T11173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.418373][T11177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.458827][T11173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.461366][T11173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.465785][T12707] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1991'. [ 235.480272][T11173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.482783][T11173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.547281][ T1167] usb 9-1: unable to get BOS descriptor or descriptor too short [ 235.554602][ T1167] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 235.558759][ T1167] usb 9-1: can't read configurations, error -71 [ 235.600495][ T40] audit: type=1400 audit(1771356130.735:789): avc: denied { getopt } for pid=12746 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 235.629663][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 235.641358][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'. [ 235.645168][T11177] bridge_slave_1: left allmulticast mode [ 235.649162][T11177] bridge_slave_1: left promiscuous mode [ 235.651199][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.711514][T12755] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2001'. [ 235.943709][T11177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.949192][T11177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.952833][T11177] bond0 (unregistering): Released all slaves [ 235.958939][T11177] bond1 (unregistering): Released all slaves [ 235.965432][T11177] bond2 (unregistering): Released all slaves [ 235.972041][T11177] bond3 (unregistering): Released all slaves [ 235.979514][T11177] bond4 (unregistering): Released all slaves [ 235.986183][T11177] bond5 (unregistering): Released all slaves [ 235.996048][T11177] bond6 (unregistering): Released all slaves [ 236.002707][T11177] bond7 (unregistering): Released all slaves [ 236.010846][T12780] netlink: 'syz.1.2007': attribute type 2 has an invalid length. [ 236.103927][T12791] kAFS: Can only specify source 'none' with -o dyn [ 236.126557][T12794] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 236.143216][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'. [ 236.168953][T12800] block nbd0: not configured, cannot reconfigure [ 236.277196][ T5931] Bluetooth: hci0: command tx timeout [ 236.385408][T12831] blkio.reset_stats is deprecated [ 236.391124][T12831] program syz.4.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.654926][T11177] hsr_slave_0: left promiscuous mode [ 236.660918][T11177] hsr_slave_1: left promiscuous mode [ 236.664438][T11177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.671010][T11177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.674897][T11177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.678547][T11177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.696238][T11177] veth0_macvtap: left promiscuous mode [ 236.701230][T11177] veth1_vlan: left promiscuous mode [ 236.703586][T11177] veth0_vlan: left promiscuous mode [ 236.719423][T12851] xt_CT: No such helper "snmp_trap" [ 236.890696][T11177] team0 (unregistering): Port device team_slave_1 removed [ 236.898068][T11177] team0 (unregistering): Port device team_slave_0 removed [ 237.031392][T12860] bond2 (unregistering): Released all slaves [ 237.097998][T12866] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.210840][ T40] audit: type=1400 audit(1771356132.345:790): avc: denied { watch } for pid=12881 comm="syz.1.2029" path="/539/file0" dev="tmpfs" ino=2885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 237.288399][T12889] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.326951][T12880] kvm: pic: non byte write [ 237.405691][T11177] IPVS: stop unused estimator thread 0... [ 237.467768][T12905] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.503705][ T40] audit: type=1400 audit(1771356132.635:791): avc: denied { map } for pid=12914 comm="syz.1.2037" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.554452][T12920] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.608996][T12924] tmpfs: Bad value for 'mpol' [ 237.624330][ T40] audit: type=1400 audit(1771356132.755:792): avc: denied { setopt } for pid=12921 comm="syz.5.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.747371][T12938] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.809912][T12944] /dev/nullb0: Can't open blockdev [ 237.844471][T12946] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 237.870009][T12948] __nla_validate_parse: 6 callbacks suppressed [ 237.870020][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'. [ 237.958790][T12953] fuse: Bad value for 'user_id' [ 237.960621][T12953] fuse: Bad value for 'user_id' [ 237.963778][T12953] ALSA: mixer_oss: invalid OSS volume '' [ 237.965723][T12953] ALSA: mixer_oss: invalid OSS volume '' [ 238.179504][T12959] ubi0: attaching mtd0 [ 238.182176][T12959] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 238.231023][T12964] bridge0: port 2(batadv0) entered disabled state [ 238.234043][T12964] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.357179][ T5931] Bluetooth: hci0: command tx timeout [ 238.640447][ T50] hid_parser_main: 5 callbacks suppressed [ 238.640467][ T50] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 238.666443][ T50] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 238.760583][T12976] fido_id[12976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 238.788606][ T5931] Bluetooth: hci2: unknown advertising packet type: 0xff [ 238.805436][ T40] audit: type=1400 audit(1771356133.935:793): avc: denied { connect } for pid=12979 comm="syz.4.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 238.836257][T12987] tmpfs: Bad value for 'mpol' [ 238.861154][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 238.949753][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2071'. [ 238.995742][ T40] audit: type=1400 audit(1771356134.125:794): avc: denied { remove_name } for pid=13006 comm="syz.5.2072" name="file2" dev="9p" ino=72613955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.004930][ T40] audit: type=1400 audit(1771356134.135:795): avc: denied { rmdir } for pid=13006 comm="syz.5.2072" name="file2" dev="9p" ino=72613955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.028847][T13010] bridge4: entered promiscuous mode [ 239.030549][T13010] bridge4: entered allmulticast mode [ 239.033826][T13010] team0: Port device bridge4 added [ 239.039214][ T40] audit: type=1400 audit(1771356134.175:796): avc: denied { mounton } for pid=13006 comm="syz.5.2072" path="/19/file0/file0" dev="9p" ino=72613947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.047233][T13007] gfs2: error -5 reading superblock [ 239.048537][T13010] bridge0: port 3(team0) entered blocking state [ 239.052687][T13010] bridge0: port 3(team0) entered disabled state [ 239.054945][T13010] team0: entered allmulticast mode [ 239.056623][T13010] team_slave_0: entered allmulticast mode [ 239.059517][T13010] team_slave_1: entered allmulticast mode [ 239.063481][T13010] team0: entered promiscuous mode [ 239.065147][T13010] team_slave_0: entered promiscuous mode [ 239.067258][T13010] team_slave_1: entered promiscuous mode [ 239.069606][T13010] bridge0: port 3(team0) entered blocking state [ 239.071818][T13010] bridge0: port 3(team0) entered forwarding state [ 239.106320][ T40] audit: type=1400 audit(1771356134.235:797): avc: denied { setopt } for pid=13011 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.113549][ T40] audit: type=1400 audit(1771356134.245:798): avc: denied { connect } for pid=13011 comm="syz.1.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.167414][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 239.318408][T13022] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 239.321676][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 239.324736][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 239.332471][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.335722][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.338948][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.342201][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.346841][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.351540][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.494768][T13024] misc userio: Begin command sent, but we're already running [ 239.502714][T13024] misc userio: Begin command sent, but we're already running [ 239.505303][T13024] misc userio: Begin command sent, but we're already running [ 239.508505][T13024] misc userio: Begin command sent, but we're already running [ 239.511245][T13024] misc userio: Begin command sent, but we're already running [ 239.514531][T13024] misc userio: Begin command sent, but we're already running [ 239.517151][T13024] misc userio: Begin command sent, but we're already running [ 239.521326][T13024] misc userio: Begin command sent, but we're already running [ 239.523862][T13024] misc userio: Begin command sent, but we're already running [ 239.528334][T13024] misc userio: Begin command sent, but we're already running [ 239.530772][T13024] misc userio: Begin command sent, but we're already running [ 239.533169][T13024] misc userio: Begin command sent, but we're already running [ 239.535549][T13024] misc userio: Begin command sent, but we're already running [ 239.540112][T13024] misc userio: Begin command sent, but we're already running [ 239.558640][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 239.563866][ T9] usbtmc 7-1:16.0: can't read capabilities [ 239.572421][ T9] usb 7-1: USB disconnect, device number 31 [ 240.154570][T13056] netlink: 'syz.1.2087': attribute type 13 has an invalid length. [ 240.202721][T13060] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 240.216475][T13062] loop1: detected capacity change from 0 to 7 [ 240.225401][T13062] Dev loop1: unable to read RDB block 7 [ 240.227697][T13062] loop1: unable to read partition table [ 240.229587][T13062] loop1: partition table beyond EOD, truncated [ 240.233825][T13062] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 240.285275][ T40] audit: type=1400 audit(1771356135.415:799): avc: denied { accept } for pid=13073 comm="syz.5.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.410757][T13088] dummy0: entered allmulticast mode [ 240.416063][T13092] 9pnet_virtio: no channels available for device syz [ 240.437893][ T5931] Bluetooth: hci0: command tx timeout [ 240.441838][T13088] dummy0: left allmulticast mode [ 240.510138][T13099] loop1: detected capacity change from 0 to 7 [ 240.513110][T12059] Dev loop1: unable to read RDB block 7 [ 240.514996][T12059] loop1: unable to read partition table [ 240.516916][T12059] loop1: partition table beyond EOD, truncated [ 240.538243][T13099] Dev loop1: unable to read RDB block 7 [ 240.540112][T13099] loop1: unable to read partition table [ 240.541997][T13099] loop1: partition table beyond EOD, truncated [ 240.544334][T13099] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 240.578973][T13101] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 240.651050][T13106] tipc: Failed to obtain node identity [ 240.653060][T13106] tipc: Enabling of bearer rejected, failed to enable media [ 240.663008][T13106] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 240.753370][T13112] Bluetooth: MGMT ver 1.23 [ 240.833079][T13122] netlink: 'syz.5.2107': attribute type 9 has an invalid length. [ 240.885908][T13121] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 240.972459][T13143] netlink: 'syz.5.2109': attribute type 4 has an invalid length. [ 241.069769][T13152] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2111'. [ 241.235468][T13157] netlink: 'syz.1.2112': attribute type 7 has an invalid length. [ 241.339658][ T9] hid-generic 0004:0006:0002.0007: item fetching failed at offset 1/2 [ 241.343709][ T9] hid-generic 0004:0006:0002.0007: probe with driver hid-generic failed with error -22 [ 241.578396][T13180] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 241.766722][T13190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.770165][T13190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.772771][T13190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 241.785668][T13190] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 241.799298][T13190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.801719][T13190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.818148][T13190] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 242.151169][T13209] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 242.178461][T13211] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 242.510933][T13219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13219 comm=syz.1.2131 [ 242.516994][T13219] netlink: 'syz.1.2131': attribute type 1 has an invalid length. [ 242.520578][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'. [ 242.582100][T13225] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 242.607271][ T50] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 242.661546][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 242.661558][ T40] audit: type=1400 audit(2000000001.590:807): avc: denied { lock } for pid=13228 comm="syz.1.2135" path="socket:[53707]" dev="sockfs" ino=53707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 242.756954][T13238] 8021q: VLANs not supported on lo [ 242.761909][T13239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'. [ 242.778858][ T50] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 242.782423][ T50] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.786833][ T50] usb 7-1: config 0 has no interface number 0 [ 242.800747][ T50] usb 7-1: config 0 interface 205 has no altsetting 0 [ 242.809978][T13245] loop1: detected capacity change from 0 to 7 [ 242.813448][T13245] Dev loop1: unable to read RDB block 7 [ 242.815850][T13245] loop1: unable to read partition table [ 242.818323][ T50] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 242.818347][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.818364][ T50] usb 7-1: Product: syz [ 242.818377][ T50] usb 7-1: Manufacturer: syz [ 242.818390][ T50] usb 7-1: SerialNumber: syz [ 242.821285][ T50] usb 7-1: config 0 descriptor?? [ 242.823946][T13247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2141'. [ 242.824067][ T50] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 242.824104][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 242.825710][T13245] loop1: partition table beyond EOD, [ 242.844215][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 242.846391][T13245] truncated [ 242.847987][ T50] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 242.851059][T13245] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 242.853335][ T50] usb 7-1: media controller created [ 242.868822][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.880461][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 242.882997][ T50] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 242.891346][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input20 [ 242.898083][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 242.900440][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 242.917266][ T50] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 243.072611][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 243.075163][ T50] dvb-usb: error while querying for an remote control event. [ 243.247726][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 243.250269][ T50] dvb-usb: error while querying for an remote control event. [ 243.281458][T13279] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 243.342988][T13283] loop1: detected capacity change from 0 to 7 [ 243.346174][T12059] Dev loop1: unable to read RDB block 7 [ 243.357202][T12059] loop1: unable to read partition table [ 243.359751][T12059] loop1: partition table beyond EOD, truncated [ 243.365268][T13283] Dev loop1: unable to read RDB block 7 [ 243.367782][T13283] loop1: unable to read partition table [ 243.385944][T13283] loop1: partition table beyond EOD, truncated [ 243.388091][T13283] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 243.411652][ T40] audit: type=1400 audit(2000000002.340:808): avc: denied { listen } for pid=13290 comm="syz.5.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.417122][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 243.423851][ T50] dvb-usb: error while querying for an remote control event. [ 243.453264][ T39] usb 7-1: USB disconnect, device number 32 [ 243.469077][ T39] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 243.618195][ T1128] sr 2:0:0:0: [sr0] tag#12 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 243.622596][ T1128] sr 2:0:0:0: [sr0] tag#12 Sense Key : Illegal Request [current] [ 243.626063][ T1128] sr 2:0:0:0: [sr0] tag#12 Add. Sense: Invalid field in cdb [ 243.630210][ T1128] sr 2:0:0:0: [sr0] tag#12 CDB: ATA command pass through(16) 85 07 42 65 13 cb [ 243.691793][T13308] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 243.763690][ T5931] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 243.797199][ T5931] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.834011][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 243.839385][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 243.850384][T12668] overlayfs: failed lookup in lower (newroot/41, name='bus', err=-40): overlapping layers [ 243.857021][T12668] overlayfs: failed lookup in lower (newroot/41, name='bus', err=-40): overlapping layers [ 243.877400][ T5931] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.052636][T13329] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 244.083683][T13331] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 244.100548][T13335] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.102183][T13331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.104843][T13335] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2171'. [ 244.106960][T13331] netlink: 'syz.4.2170': attribute type 4 has an invalid length. [ 244.107033][T13332] netlink: 'syz.4.2170': attribute type 4 has an invalid length. [ 244.117691][T13331] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 244.295418][T11176] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.310915][T13349] loop1: detected capacity change from 0 to 7 [ 244.314412][T13349] Dev loop1: unable to read RDB block 7 [ 244.316398][T13349] loop1: unable to read partition table [ 244.318938][T13349] loop1: partition table beyond EOD, truncated [ 244.321756][T13349] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 244.358117][T13351] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2178'. [ 244.383473][ T5928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.392320][ T5928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.396405][ T5928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.405696][ T5928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.410908][ T5928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.477930][T11176] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.551845][T13357] /dev/nullb0: Can't open blockdev [ 244.596568][T11176] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.646616][T13352] lo speed is unknown, defaulting to 1000 [ 244.649236][ T5985] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 244.691053][T11176] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.798489][ T5985] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.807901][ T5985] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.812062][ T5985] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.816714][T13352] chnl_net:caif_netlink_parms(): no params data found [ 244.819512][ T5985] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 244.823736][ T5985] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.826599][ T5985] usb 9-1: Product: syz [ 244.829231][ T5985] usb 9-1: Manufacturer: syz [ 244.830909][ T5985] usb 9-1: SerialNumber: syz [ 244.838455][ T5985] hub 9-1:1.0: bad descriptor, ignoring hub [ 244.840786][ T5985] hub 9-1:1.0: probe with driver hub failed with error -5 [ 244.915492][T11176] bridge_slave_1: left allmulticast mode [ 244.917823][T11176] bridge_slave_1: left promiscuous mode [ 244.920095][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.933589][T11176] bridge_slave_0: left allmulticast mode [ 244.935570][T11176] bridge_slave_0: left promiscuous mode [ 244.938447][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.973610][ T5931] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 244.982551][T13372] xt_l2tp: missing protocol rule (udp|l2tpip) [ 245.040538][ T5985] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.211023][T11176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.216665][T11176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.222565][T11176] bond0 (unregistering): Released all slaves [ 245.227536][T11176] bond1 (unregistering): Released all slaves [ 245.251034][T13352] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.253679][T13352] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.256041][T13352] bridge_slave_0: entered allmulticast mode [ 245.259020][T13352] bridge_slave_0: entered promiscuous mode [ 245.263071][T13352] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.265495][T13352] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.268006][T13352] bridge_slave_1: entered allmulticast mode [ 245.270776][T13352] bridge_slave_1: entered promiscuous mode [ 245.296693][T13352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.305553][T13352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.332391][T13352] team0: Port device team_slave_0 added [ 245.338451][T13352] team0: Port device team_slave_1 added [ 245.351830][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 245.357506][ T50] usb 9-1: USB disconnect, device number 8 [ 245.367699][ T50] usblp0: removed [ 245.390126][T13385] overlayfs: failed to resolve './file1': -2 [ 245.391532][T13352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.395776][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.406188][T13352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.409528][T13388] fuse: Bad value for 'fd' [ 245.414622][T13352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.415156][T13385] Bluetooth: MGMT ver 1.23 [ 245.418627][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.428807][T13352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.456727][T13352] hsr_slave_0: entered promiscuous mode [ 245.460194][T13352] hsr_slave_1: entered promiscuous mode [ 245.462518][T13352] debugfs: 'hsr0' already exists in 'hsr' [ 245.464377][T13352] Cannot create hsr debugfs directory [ 245.593472][T13400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'. [ 245.709660][T13407] xt_hashlimit: size too large, truncated to 1048576 [ 245.772019][T13352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 245.787702][T13352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 245.793110][T13352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 245.816338][T13352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 245.887240][ T5931] Bluetooth: hci3: command 0x0c1a tx timeout [ 245.889631][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'. [ 245.917925][T11176] hsr_slave_0: left promiscuous mode [ 245.922714][T11176] hsr_slave_1: left promiscuous mode [ 245.925612][T11176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.937930][T11176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.952778][T11176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.955274][T11176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.975007][T11176] veth1_macvtap: left promiscuous mode [ 245.976845][T11176] veth0_macvtap: left promiscuous mode [ 245.978719][T11176] veth1_vlan: left promiscuous mode [ 245.980413][T11176] veth0_vlan: left promiscuous mode [ 246.152764][T11176] team0 (unregistering): Port device team_slave_1 removed [ 246.163502][T11176] team0 (unregistering): Port device team_slave_0 removed [ 246.244859][T13440] binder_alloc: 13439: binder_alloc_buf, no vma [ 246.266769][T13352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.298398][T13352] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.303527][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.305960][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.322415][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.324755][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.344917][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.349273][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.352923][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.355662][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.360547][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.363035][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.376837][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.379520][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.381870][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.384311][ T39] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.391462][ T39] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 246.439798][T13456] fido_id[13456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.445895][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 246.452539][ T5931] Bluetooth: hci0: command tx timeout [ 246.471029][T13352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.579049][T13478] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 246.635308][T13352] veth0_vlan: entered promiscuous mode [ 246.643396][T13352] veth1_vlan: entered promiscuous mode [ 246.648150][T13491] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.656408][T13495] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 246.662427][T13352] veth0_macvtap: entered promiscuous mode [ 246.669203][T13352] veth1_macvtap: entered promiscuous mode [ 246.691546][T13352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.700636][T13352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.711094][T13123] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.714049][T13123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.716896][T13123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.720518][T13123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.761892][T11173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.764580][T11173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.783485][T11173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.786185][T11173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.868540][T13507] fuse: Unknown parameter ' ' [ 246.893922][ T5931] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 247.090916][T13529] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 247.223844][T13544] overlayfs: failed lookup in lower (newroot/5, name='bus', err=-40): overlapping layers [ 247.258930][T13552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.294197][T13562] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2227'. [ 247.305265][T13564] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 247.307907][T13564] netlink: 'syz.2.2228': attribute type 4 has an invalid length. [ 247.310781][T13564] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2228'. [ 247.313098][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.339287][T13566] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 247.413166][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.423305][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.428115][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.432383][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.436442][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.441119][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.445227][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.450790][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.457288][T13585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13585 comm=syz.2.2233 [ 247.508834][T13596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.598691][T13602] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 247.623547][ T5928] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.628491][ T5928] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.635270][ T5928] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 247.640444][T13608] veth0_to_team: entered promiscuous mode [ 247.646196][T13608] erspan0: entered promiscuous mode [ 247.647677][ T5928] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 247.652347][ T5928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.822349][T13603] lo speed is unknown, defaulting to 1000 [ 247.959221][ T5928] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.990959][T13603] chnl_net:caif_netlink_parms(): no params data found [ 248.044912][T13123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.050956][T13123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.096035][T13645] mkiss: ax0: crc mode is auto. [ 248.102084][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.105165][T13603] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.112901][T13603] bridge_slave_0: entered allmulticast mode [ 248.117324][T13603] bridge_slave_0: entered promiscuous mode [ 248.121690][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.124762][T13603] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.127957][T13603] bridge_slave_1: entered allmulticast mode [ 248.131326][T13603] bridge_slave_1: entered promiscuous mode [ 248.175571][T13603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.199397][T13123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.203602][T13123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.206051][T13650] netlink: 'syz.6.2252': attribute type 11 has an invalid length. [ 248.212070][T13650] netlink: 'syz.6.2252': attribute type 11 has an invalid length. [ 248.213466][T13603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.233920][T13603] team0: Port device team_slave_0 added [ 248.242098][T13650] : entered promiscuous mode [ 248.253357][T13603] team0: Port device team_slave_1 added [ 248.286228][T13603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.294682][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.303510][T13603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.309612][T13603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.317526][T13603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.326968][T13603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.380353][T13123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.383780][T13123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.418509][T13603] hsr_slave_0: entered promiscuous mode [ 248.420929][T13603] hsr_slave_1: entered promiscuous mode [ 248.423641][T13603] debugfs: 'hsr0' already exists in 'hsr' [ 248.426064][T13603] Cannot create hsr debugfs directory [ 248.459088][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 248.461612][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 248.527796][ T5928] Bluetooth: hci0: command tx timeout [ 248.539603][T13677] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 248.633853][T13689] netlink: 'syz.6.2256': attribute type 2 has an invalid length. [ 248.646187][T13123] team0: left allmulticast mode [ 248.649668][T13123] team_slave_0: left allmulticast mode [ 248.651846][T13123] team_slave_1: left allmulticast mode [ 248.654034][T13123] team0: left promiscuous mode [ 248.655628][T13123] team_slave_0: left promiscuous mode [ 248.657874][T13123] team_slave_1: left promiscuous mode [ 248.659852][T13123] bridge0: port 3(team0) entered disabled state [ 248.664471][T13123] bridge_slave_1: left allmulticast mode [ 248.666279][T13123] bridge_slave_1: left promiscuous mode [ 248.670547][T13123] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.680023][T13123] x9: left allmulticast mode [ 248.682091][T13123] x9: left promiscuous mode [ 248.683960][T13123] bridge0: port 1(1x9) entered disabled state [ 248.728922][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 248.737193][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 248.808960][T13123] bond1 (unregistering): (slave geneve2): Releasing active interface [ 249.030525][T13123] team0: Port device bridge4 removed [ 249.056820][T13652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.098268][T13123] bond1 (unregistering): Released all slaves [ 249.108124][T13704] usb usb9: usbfs: process 13704 (syz.2.2263) did not claim interface 0 before use [ 249.113174][T13123] smc: removing net device bond0 with user defined pnetid SYZ2 [ 249.117031][T13123] bond0 (unregistering): Released all slaves [ 249.128614][T13123] bond2 (unregistering): Released all slaves [ 249.136606][T13123] bond3 (unregistering): Released all slaves [ 249.143398][T13123] bond4 (unregistering): Released all slaves [ 249.155713][T13123] bond5 (unregistering): Released all slaves [ 249.198897][T13711] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 249.204246][ T40] audit: type=1400 audit(2000000008.130:809): avc: denied { relabelto } for pid=13710 comm="syz.4.2265" name="file0" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 249.213579][ T40] audit: type=1400 audit(2000000008.140:810): avc: denied { associate } for pid=13710 comm="syz.4.2265" name="file0" dev="tmpfs" ino=1273 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 249.237617][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 249.239684][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 249.267969][ T40] audit: type=1400 audit(2000000008.190:811): avc: denied { rmdir } for pid=10214 comm="syz-executor" name="file0" dev="tmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dhcpd_initrc_exec_t:s0" [ 249.301519][T13669] ceph: No mds server is up or the cluster is laggy [ 249.362707][T13123] IPVS: stopping backup sync thread 6352 ... [ 249.717996][ T834] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 249.719321][ T5928] Bluetooth: hci4: command tx timeout [ 249.745427][T13123] hsr_slave_0: left promiscuous mode [ 249.750875][T13123] hsr_slave_1: left promiscuous mode [ 249.753115][T13123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.760641][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.765594][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.768773][T13123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.786510][T13123] veth1_macvtap: left promiscuous mode [ 249.790617][T13123] veth0_macvtap: left promiscuous mode [ 249.793212][T13123] veth1_vlan: left promiscuous mode [ 249.794901][T13123] veth0_vlan: left promiscuous mode [ 249.889414][T13757] program syz.4.2275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.917130][ T40] audit: type=1326 audit(2000000008.840:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13758 comm="syz.6.2276" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcab99c139 code=0x0 [ 249.930227][T13123] pim6reg (unregistering): left allmulticast mode [ 250.000009][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.004984][T13123] vlan0 (unregistering): left allmulticast mode [ 250.006157][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.016271][T13123] veth0_vlan (unregistering): left allmulticast mode [ 250.018448][T13763] SELinux: truncated policydb string identifier [ 250.021292][T13763] SELinux: failed to load policy [ 250.023353][ T40] audit: type=1400 audit(2000000008.950:813): avc: denied { connect } for pid=13758 comm="syz.6.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 250.023566][T13763] __nla_validate_parse: 4 callbacks suppressed [ 250.023575][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2276'. [ 250.065362][T13757] tmpfs: Unknown parameter 'grpquota_bѓck_hardlimit' [ 250.110657][T13123] team0 (unregistering): Port device team_slave_1 removed [ 250.122768][T13123] team0 (unregistering): Port device team_slave_0 removed [ 250.172845][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2275'. [ 250.250088][T13603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.254757][T13603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.259069][T13603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.263593][T13603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.324375][T13603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.336112][T13603] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.343498][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.346643][T11184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.354727][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.357138][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.457177][ T834] usb 7-1: device descriptor read/64, error -71 [ 250.481181][T13603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.504689][T13603] veth0_vlan: entered promiscuous mode [ 250.509789][T13603] veth1_vlan: entered promiscuous mode [ 250.524175][T13603] veth0_macvtap: entered promiscuous mode [ 250.528387][T13603] veth1_macvtap: entered promiscuous mode [ 250.539774][T13603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.546854][T13603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.555650][T11175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.559587][T11175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.563896][T11175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.565466][T13123] IPVS: stop unused estimator thread 0... [ 250.569032][T11175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.577176][ T1029] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 250.598873][ T5928] Bluetooth: hci0: command tx timeout [ 250.631411][T11184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.634099][T11184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.651639][ T1190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.654289][ T1190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.697173][ T834] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 250.705557][ T40] audit: type=1326 audit(2000000009.630:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13793 comm="syz.1.2238" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a1c79c139 code=0x75e00000 [ 250.737660][ T1029] usb 9-1: Using ep0 maxpacket: 8 [ 250.741355][ T1029] usb 9-1: config 0 has no interfaces? [ 250.743725][ T1029] usb 9-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 250.747770][ T1029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.753483][ T1029] usb 9-1: config 0 descriptor?? [ 250.784484][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2280'. [ 250.857381][ T834] usb 7-1: Using ep0 maxpacket: 16 [ 250.861114][ T834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.864835][ T834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.869338][ T834] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 250.872392][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.876305][ T834] usb 7-1: config 0 descriptor?? [ 250.960502][ T55] usb 9-1: USB disconnect, device number 9 [ 251.250850][ T834] usbhid 7-1:0.0: can't add hid device: -71 [ 251.252904][ T834] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 251.257583][ T834] usb 7-1: USB disconnect, device number 34 [ 251.652897][T13798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.655066][T13798] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 251.658671][T13798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.660853][T13798] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 251.672521][T13798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.674451][T13798] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 251.812661][T13844] loop4: detected capacity change from 0 to 7 [ 251.841065][T12059] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.842830][T12059] loop4: partition table partially beyond EOD, truncated [ 251.849649][T12059] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 251.877687][T13849] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.901399][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 251.904378][T13844] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.908745][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 251.911708][T13844] loop4: partition table partially beyond EOD, truncated [ 251.915804][T13844] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 251.928884][T13856] input: syz0 as /devices/virtual/input/input22 [ 251.930953][T13856] input: failed to attach handler leds to device input22, error: -6 [ 251.949613][T13858] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 251.982522][T13858] CUSE: unknown device info "&b%ZW)3\my " [ 251.985200][T13858] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 251.995109][T12059] udevd[12059]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 251.999610][T13858] CUSE: DEVNAME unspecified [ 252.060212][T13862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2299'. [ 252.109369][ T40] audit: type=1400 audit(2000000011.040:815): avc: denied { write } for pid=13867 comm="syz.4.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 252.160415][ T40] audit: type=1400 audit(2000000011.090:816): avc: denied { bind } for pid=13861 comm="syz.6.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.182142][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 252.188984][T13875] netlink: 'syz.2.2302': attribute type 30 has an invalid length. [ 252.200317][T11184] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.203616][T11184] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.210535][T11184] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.217953][T11184] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.222779][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'. [ 252.223951][T13887] random: crng reseeded on system resumption [ 252.225695][T13875] netlink: 'syz.2.2302': attribute type 30 has an invalid length. [ 252.238536][T13887] Restarting kernel threads ... [ 252.239232][T13875] SELinux: policydb magic number 0xffff does not match expected magic number 0xf97cff8c [ 252.242293][T13887] Done restarting kernel threads. [ 252.243919][T13875] SELinux: failed to load policy [ 252.246669][ T40] audit: type=1400 audit(2000000011.170:817): avc: denied { getopt } for pid=13886 comm="syz.1.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 252.273363][T13892] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 252.273412][ T40] audit: type=1400 audit(2000000011.200:818): avc: denied { mounton } for pid=13891 comm="syz.1.2308" path="/bus" dev="ramfs" ino=57998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 252.307276][T13894] comedi comedi3: comedi_config --init_data is deprecated [ 252.348692][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2312'. [ 252.354457][T13902] veth0_to_team: entered promiscuous mode [ 252.408365][T13913] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2314'. [ 252.435085][T13913] loop5: detected capacity change from 0 to 7 [ 252.491750][T13926] selinux_netlink_send: 57 callbacks suppressed [ 252.491762][T13926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59904 sclass=netlink_route_socket pid=13926 comm=syz.4.2314 [ 252.545482][T13930] No control pipe specified [ 252.551228][T12059] Dev loop5: unable to read RDB block 7 [ 252.553178][T12059] loop5: unable to read partition table [ 252.555306][T12059] loop5: partition table beyond EOD, truncated [ 252.635259][T13941] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 252.675681][T13913] Dev loop5: unable to read RDB block 7 [ 252.687194][T13913] loop5: unable to read partition table [ 252.689183][T13913] loop5: partition table beyond EOD, truncated [ 252.691811][T13913] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 253.000226][T13966] comedi comedi3: comedi_config --init_data is deprecated [ 253.242727][T13995] can0: slcan on ttyS3. [ 253.299429][T13995] can0 (unregistered): slcan off ttyS3. [ 253.359944][T13999] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 253.485783][T14017] comedi comedi3: comedi_config --init_data is deprecated [ 253.528516][T14021] netlink: 'syz.4.2345': attribute type 3 has an invalid length. [ 253.530973][T14021] netlink: 'syz.4.2345': attribute type 1 has an invalid length. [ 253.589353][T14026] hpfs: hpfs_map_sector(): read error [ 253.599763][T14026] hpfs: hpfs_map_sector(): read error [ 253.647804][T14036] netlink: 'syz.2.2348': attribute type 1 has an invalid length. [ 253.679685][T14036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.694153][T14036] bond2: (slave geneve3): making interface the new active one [ 253.707873][T14036] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 253.809927][T14049] comedi comedi3: comedi_config --init_data is deprecated [ 254.031485][T14072] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 254.775348][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 254.775361][ T40] audit: type=1400 audit(2000000013.700:832): avc: denied { unmount } for pid=11823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 254.829600][T14092] geneve1: entered allmulticast mode [ 254.856577][T14096] comedi comedi3: comedi_config --init_data is deprecated [ 255.016590][T14099] loop2: detected capacity change from 0 to 7 [ 255.030842][T14099] Dev loop2: unable to read RDB block 7 [ 255.033097][T14099] loop2: AHDI p1 p2 p3 [ 255.034457][T14099] loop2: partition table partially beyond EOD, truncated [ 255.036985][T14099] loop2: p1 start 1601398130 is beyond EOD, truncated [ 255.039183][T14099] loop2: p2 start 1702059890 is beyond EOD, truncated [ 255.045143][ T40] audit: type=1400 audit(2000000013.950:833): avc: denied { write } for pid=14113 comm="syz.1.2375" path="socket:[58228]" dev="sockfs" ino=58228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.305823][T14123] __nla_validate_parse: 12 callbacks suppressed [ 255.305837][T14123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2379'. [ 255.312656][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 255.318083][ T1029] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.323229][T14123] : entered promiscuous mode [ 255.355899][T14125] comedi comedi3: comedi_config --init_data is deprecated [ 255.426276][T14137] loop4: detected capacity change from 0 to 7 [ 255.429498][T14137] buffer_io_error: 57 callbacks suppressed [ 255.429508][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.434454][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.436972][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.440357][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.442867][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.445356][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.448967][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.451524][T14137] ldm_validate_partition_table(): Disk read failed. [ 255.453681][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.456119][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.458982][T14137] Buffer I/O error on dev loop4, logical block 0, async page read [ 255.461494][T14137] Dev loop4: unable to read RDB block 0 [ 255.463392][T14137] loop4: unable to read partition table [ 255.465280][T14137] loop4: partition table beyond EOD, truncated [ 255.468249][ T1029] usb 6-1: Using ep0 maxpacket: 32 [ 255.470287][T14137] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 255.475439][ T1029] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 255.478654][T14137] IPVS: length: 120 != 24 [ 255.480471][ T1029] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 255.484197][ T1029] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.488227][ T1029] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 255.494451][ T1029] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 255.497892][ T1029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.500612][ T1029] usb 6-1: Product: syz [ 255.501941][ T1029] usb 6-1: Manufacturer: syz [ 255.503461][ T1029] usb 6-1: SerialNumber: syz [ 255.510424][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 255.514782][ T1029] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input24 [ 255.613878][T14146] bond5 (unregistering): Released all slaves [ 255.617147][ T7300] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 255.727143][ T1029] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 255.729789][ T1029] (id 0x00) [ 255.762800][T14157] comedi comedi3: comedi_config --init_data is deprecated [ 255.778023][ T1029] rc_core: IR keymap rc-imon-pad not found [ 255.780988][ T1029] Registered IR keymap rc-empty [ 255.783148][ T1029] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 255.787411][ T1029] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 255.791658][ T7300] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.800126][ T7300] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 255.803961][ T7300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 255.806868][ T7300] usb 7-1: Product: syz [ 255.808855][ T7300] usb 7-1: Manufacturer: syz [ 255.811065][ T7300] usb 7-1: SerialNumber: syz [ 255.841582][ T40] audit: type=1400 audit(2000000014.770:834): avc: denied { bind } for pid=14162 comm="syz.4.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 255.877328][ T39] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 255.928859][ T1029] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 255.935997][ T1029] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input25 [ 255.944014][ T1029] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:15> initialized [ 256.022155][ T7300] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 256.039585][ T39] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 256.043052][ T39] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.046622][ T39] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.050950][ T39] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 256.055887][ T39] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 256.059195][ T39] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 256.061790][ T39] usb 11-1: Manufacturer: syz [ 256.064564][ T39] usb 11-1: config 0 descriptor?? [ 256.163387][ T5902] usb 6-1: USB disconnect, device number 15 [ 256.169084][T14118] imon:send_packet: packet tx failed (-71) [ 256.187429][T14118] imon:vfd_write: send packet #0 failed [ 256.233453][T11174] tipc: Subscription rejected, illegal request [ 256.237747][T12408] usb 7-1: USB disconnect, device number 35 [ 256.243811][T12408] usblp1: removed [ 256.433251][T14167] overlay: ./file1 is not a directory [ 256.438389][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 256.470862][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2394'. [ 256.539872][ T39] hid_parser_main: 22 callbacks suppressed [ 256.539887][ T39] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 256.549288][ T39] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 256.871300][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.874544][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.928915][ T40] audit: type=1400 audit(2000000015.860:835): avc: denied { remount } for pid=14186 comm="syz.2.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 256.937779][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 256.941150][T14190] hsr_slave_0: left promiscuous mode [ 256.943582][T14190] hsr_slave_1: left promiscuous mode [ 256.970399][T14194] comedi comedi3: comedi_config --init_data is deprecated [ 257.075112][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 257.332685][ T40] audit: type=1326 audit(2000000016.260:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.4.2395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd6039c139 code=0x7fc00000 [ 257.337226][ T39] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 257.340105][ T40] audit: type=1326 audit(2000000016.260:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.4.2395" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fcd6039c139 code=0x7fc00000 [ 257.374834][T14209] overlayfs: missing 'workdir' [ 257.441112][ T40] audit: type=1400 audit(2000000016.370:838): avc: denied { listen } for pid=14215 comm="syz.4.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 257.455019][T14218] comedi comedi3: comedi_config --init_data is deprecated [ 257.507267][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 257.510327][ T39] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 257.513751][ T39] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 257.517782][ T39] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.521309][ T39] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 257.526850][ T39] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 257.530162][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.532769][ T39] usb 7-1: Product: syz [ 257.534110][ T39] usb 7-1: Manufacturer: syz [ 257.535602][ T39] usb 7-1: SerialNumber: syz [ 257.542302][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 257.545691][ T39] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input26 [ 257.596870][ T40] audit: type=1400 audit(2000000016.520:839): avc: denied { setattr } for pid=14219 comm="syz.1.2411" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 257.641956][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2413'. [ 257.664716][ T40] audit: type=1400 audit(2000000016.590:840): avc: denied { getopt } for pid=14219 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 257.722740][T14237] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2415'. [ 257.767379][ T39] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 257.771511][ T39] (id 0x00) [ 257.817191][ T39] rc_core: IR keymap rc-imon-pad not found [ 257.819198][ T39] Registered IR keymap rc-empty [ 257.821370][ T39] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 257.824644][ T39] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 257.843712][T14247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2417'. [ 257.846788][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2417'. [ 257.852548][T14247] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 257.858288][ T40] audit: type=1400 audit(2000000016.790:841): avc: denied { relabelto } for pid=14245 comm="syz.4.2417" name="cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 257.969284][ T39] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 257.974453][ T39] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input27 [ 257.983943][ T39] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:36> initialized [ 258.206262][ T39] usb 7-1: USB disconnect, device number 36 [ 258.225524][T14275] comedi comedi3: comedi_config --init_data is deprecated [ 258.439451][T14287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27187 sclass=netlink_route_socket pid=14287 comm=syz.1.2424 [ 258.538057][T14304] syzkaller0: entered promiscuous mode [ 258.539929][T14304] syzkaller0: entered allmulticast mode [ 258.649481][ T5902] usb 11-1: USB disconnect, device number 3 [ 260.679782][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.681996][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.019839][T14260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.072285][T14311] vcan0: tx address claim with dlc 0 [ 261.192386][T14329] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 261.260600][T14333] fuse: Unknown parameter 'pcr' [ 261.266229][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 261.266244][ T40] audit: type=1400 audit(2000000003.000:843): avc: denied { accept } for pid=14332 comm="syz.6.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 261.351821][ T40] audit: type=1400 audit(2000000003.090:844): avc: denied { read } for pid=14336 comm="syz.1.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.467108][T14352] macvlan0: entered allmulticast mode [ 261.469507][T14352] veth1_vlan: entered allmulticast mode [ 261.477446][T14352] pim6reg: entered allmulticast mode [ 261.481979][T14352] veth1_vlan: left allmulticast mode [ 261.485898][T14352] macvlan0 (unregistering): left allmulticast mode [ 261.606867][ T40] audit: type=1400 audit(2000000003.340:845): avc: denied { read } for pid=14371 comm="syz.2.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 261.823133][T14388] tmpfs: Bad value for 'mpol' [ 261.850153][T14383] __nla_validate_parse: 4 callbacks suppressed [ 261.850165][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2450'. [ 261.855833][T14389] 9p: Could not find request transport: xen [ 261.898867][T14389] 9p: Could not find request transport: xen [ 261.923802][T14389] 9p: Could not find request transport: xen [ 261.945445][T14389] 9p: Could not find request transport: xen [ 261.965932][T14389] 9p: Could not find request transport: xen [ 261.987162][T14389] 9p: Could not find request transport: xen [ 262.013217][T14389] 9p: Could not find request transport: xen [ 262.015673][T14405] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 262.019199][T14405] fuse: Bad value for 'fd' [ 262.041104][T14389] 9p: Could not find request transport: xen [ 262.065911][T14389] 9p: Could not find request transport: xen [ 262.088417][T14389] 9p: Could not find request transport: xen [ 262.106553][T14389] 9p: Could not find request transport: xen [ 262.122724][ T40] audit: type=1400 audit(2000000003.860:846): avc: denied { getattr } for pid=14415 comm="syz.4.2457" path="socket:[60995]" dev="sockfs" ino=60995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 262.136615][T14389] 9p: Could not find request transport: xen [ 262.149733][ T40] audit: type=1400 audit(2000000003.890:847): avc: denied { getopt } for pid=14421 comm="syz.1.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.162632][T14389] 9p: Could not find request transport: xen [ 262.181074][T14389] 9p: Could not find request transport: xen [ 262.205266][T14389] 9p: Could not find request transport: xen [ 262.224684][T14389] 9p: Could not find request transport: xen [ 262.258122][T14389] 9p: Could not find request transport: xen [ 262.266345][T14433] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 262.287317][T14389] 9p: Could not find request transport: xen [ 262.303910][ T40] audit: type=1400 audit(2000000004.040:848): avc: denied { getattr } for pid=14434 comm="syz.1.2461" name="[io_uring]" dev="anon_inodefs" ino=61676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 262.314662][T14389] 9p: Could not find request transport: xen [ 262.333645][T14389] 9p: Could not find request transport: xen [ 262.359450][T14389] 9p: Could not find request transport: xen [ 262.379161][T14389] 9p: Could not find request transport: xen [ 262.398986][T14389] 9p: Could not find request transport: xen [ 262.419207][T14389] 9p: Could not find request transport: xen [ 262.439204][T14389] 9p: Could not find request transport: xen [ 262.459036][T14389] 9p: Could not find request transport: xen [ 262.476344][T14389] 9p: Could not find request transport: xen [ 262.493085][T14389] 9p: Could not find request transport: xen [ 262.509867][T14389] 9p: Could not find request transport: xen [ 262.526843][T14389] 9p: Could not find request transport: xen [ 262.546907][T14389] 9p: Could not find request transport: xen [ 262.570873][T14389] 9p: Could not find request transport: xen [ 262.588874][T14389] 9p: Could not find request transport: xen [ 262.753868][ T40] audit: type=1400 audit(2000000004.490:849): avc: denied { mount } for pid=14476 comm="syz.6.2471" name="/" dev="rpc_pipefs" ino=59190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 262.843039][ T40] audit: type=1400 audit(2000000004.580:850): avc: denied { unmount } for pid=13352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 263.081477][T14521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.090929][T14522] wg1: mtu less than device minimum [ 263.155495][T14529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11008 sclass=netlink_route_socket pid=14529 comm=syz.6.2482 [ 263.155990][T14528] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2485'. [ 263.238141][T14534] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 263.243752][T14534] Option ''MO' to dns_resolver key: bad/missing value [ 263.428470][T14543] netlink: 'syz.6.2490': attribute type 13 has an invalid length. [ 263.536340][T14554] syz.4.2493 (14554): /proc/14552/oom_adj is deprecated, please use /proc/14552/oom_score_adj instead. [ 263.539255][ T40] audit: type=1400 audit(2000000005.270:851): avc: denied { write } for pid=14542 comm="syz.6.2490" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.558806][T14555] block device autoloading is deprecated and will be removed. [ 263.563450][T14543] netlink: 'syz.6.2490': attribute type 10 has an invalid length. [ 263.568885][T14543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.580751][T14543] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 263.584801][T14543] netlink: 'syz.6.2490': attribute type 10 has an invalid length. [ 263.588365][T14543] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2490'. [ 263.591339][T14543] batadv0: entered promiscuous mode [ 263.593115][T14543] batadv0: entered allmulticast mode [ 263.598399][T14543] bond0: (slave batadv0): Releasing backup interface [ 263.606970][T14543] bridge0: port 3(batadv0) entered blocking state [ 263.609760][T14543] bridge0: port 3(batadv0) entered disabled state [ 263.611570][T14561] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 263.637868][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 263.657871][T14561] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.662200][T14561] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 263.686746][T14561] bond3: (slave vxcan3): making interface the new active one [ 263.690837][T14561] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 263.807486][T11174] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 263.810887][T11174] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 264.045229][ T40] audit: type=1400 audit(2000000005.780:852): avc: denied { mounton } for pid=14593 comm="syz.4.2507" path="/proc/949/cgroup" dev="proc" ino=61841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 264.102636][T14603] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2509'. [ 264.387887][ T6013] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 264.537131][ T6013] usb 11-1: Using ep0 maxpacket: 8 [ 264.540173][ T6013] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.543392][ T6013] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.546511][ T6013] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 264.550338][ T6013] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 264.553702][ T6013] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.558315][ T6013] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.561551][ T6013] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.775562][ T6013] usb 11-1: GET_CAPABILITIES returned 0 [ 264.777680][ T6013] usbtmc 11-1:16.0: can't read capabilities [ 264.979404][T14604] usb 11-1: usbtmc_ioctl_clear_in_halt returned -32 [ 265.038877][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2510'. [ 265.178965][T14635] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 265.463643][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 265.478595][T14650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.485055][T14653] QAT: Stopping all acceleration devices. [ 265.551813][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 265.555641][T14657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2529'. [ 265.563018][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2529'. [ 265.621328][T14599] gfs2: not a GFS2 filesystem [ 265.820195][T14671] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer. [ 266.099612][T14685] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.105126][T14686] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 266.256252][ T5985] IPVS: starting estimator thread 0... [ 266.318107][T14706] loop2: detected capacity change from 0 to 7 [ 266.321877][T14706] Dev loop2: unable to read RDB block 7 [ 266.324588][T14706] loop2: AHDI p1 p2 [ 266.326431][T14706] loop2: partition table partially beyond EOD, truncated [ 266.330401][T14706] loop2: p1 start 1818582900 is beyond EOD, truncated [ 266.369702][T14701] IPVS: using max 21 ests per chain, 50400 per kthread [ 266.443924][T14717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14717 comm=syz.4.2545 [ 266.609761][T14723] netlink: 'syz.4.2546': attribute type 3 has an invalid length. [ 266.658011][T14727] netlink: 'syz.4.2546': attribute type 3 has an invalid length. [ 266.902300][T14736] netlink: 'syz.4.2549': attribute type 1 has an invalid length. [ 266.916652][T14736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.937796][T14736] bond5: (slave ip6erspan0): making interface the new active one [ 266.944589][T14736] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 266.966774][T14739] __nla_validate_parse: 2 callbacks suppressed [ 266.966786][T14739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2550'. [ 267.052352][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 267.052365][ T40] audit: type=1400 audit(2000000008.790:857): avc: denied { ioctl } for pid=14740 comm="syz.4.2551" path="socket:[63786]" dev="sockfs" ino=63786 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 267.061978][T14746] fuse: Unknown parameter 'ro' [ 267.082549][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 267.116450][ T5902] usb 11-1: USB disconnect, device number 4 [ 267.121584][T14747] xt_cgroup: invalid path, errno=-2 [ 267.254215][ T40] audit: type=1326 audit(2000000008.990:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14754 comm="syz.1.2555" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a1c79c139 code=0x0 [ 267.299012][ T40] audit: type=1400 audit(2000000009.040:859): avc: denied { create } for pid=14760 comm="syz.1.2556" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.305801][ T40] audit: type=1400 audit(2000000009.040:860): avc: denied { read write } for pid=14760 comm="syz.1.2556" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.315711][ T40] audit: type=1400 audit(2000000009.040:861): avc: denied { open } for pid=14760 comm="syz.1.2556" path="/68/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.379117][ T40] audit: type=1400 audit(2000000009.120:862): avc: denied { unlink } for pid=13603 comm="syz-executor" name="file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.588532][T14774] netlink: 'syz.1.2560': attribute type 10 has an invalid length. [ 267.594695][T14774] team0: Device vxcan1 is of different type [ 267.608332][T14774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14774 comm=syz.1.2560 [ 267.900788][T14792] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 267.906993][T14792] exFAT-fs (nullb0): invalid boot record signature [ 267.909694][T14792] exFAT-fs (nullb0): failed to read boot sector [ 267.911776][T14792] exFAT-fs (nullb0): failed to recognize exfat type [ 267.917262][T14793] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 267.933241][T14793] exFAT-fs (nullb0): invalid boot record signature [ 267.936007][T14793] exFAT-fs (nullb0): failed to read boot sector [ 267.938855][T14793] exFAT-fs (nullb0): failed to recognize exfat type [ 267.989999][T14799] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 268.063989][ T40] audit: type=1400 audit(2000000009.800:863): avc: denied { block_suspend } for pid=14803 comm="syz.6.2570" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 268.072788][ T40] audit: type=1400 audit(2000000009.810:864): avc: denied { accept } for pid=14807 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 268.130769][T14812] usb usb9: usbfs: process 14812 (syz.6.2572) did not claim interface 0 before use [ 268.215957][T14820] : renamed from vlan0 (while UP) [ 268.277988][T14814] /dev/sr0: Can't open blockdev [ 268.364797][T14833] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2577'. [ 268.471519][T14844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14844 comm=syz.2.2582 [ 268.649322][ T1029] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 268.678320][T14863] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 268.830773][ T1029] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 268.833543][ T1029] usb 6-1: config 0 has no interface number 0 [ 268.837021][ T1029] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 268.840109][ T1029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.842660][ T1029] usb 6-1: Product: syz [ 268.844038][ T1029] usb 6-1: Manufacturer: syz [ 268.845535][ T1029] usb 6-1: SerialNumber: syz [ 268.858266][ T1029] usb 6-1: config 0 descriptor?? [ 268.865207][T14870] binder: 14868:14870 ioctl 80705864 200000000200 returned -22 [ 269.129432][T14883] netlink: 'syz.6.2596': attribute type 1 has an invalid length. [ 269.142450][T14883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.154336][T14883] bond2: (slave gretap1): making interface the new active one [ 269.158930][T14883] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 269.259653][T14890] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2598'. [ 269.263399][T14890] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 269.421363][T14900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2580'. [ 269.454162][T14903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2603'. [ 269.455746][T14902] Cannot find add_set index 46338 as target [ 269.628847][T14900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14900 comm=syz.1.2580 [ 269.736837][T14911] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 269.739530][T14911] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 269.742464][T14911] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 269.744928][T14911] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 269.755564][T14911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 269.762122][T14911] tmpfs: Bad value for 'mpol' [ 269.770121][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 269.773102][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 270.228931][T14927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.235991][T14927] program syz.6.2610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.246785][T14929] loop1: detected capacity change from 0 to 7 [ 270.250090][T11829] Dev loop1: unable to read RDB block 7 [ 270.252060][T11829] loop1: unable to read partition table [ 270.254022][T11829] loop1: partition table beyond EOD, truncated [ 270.265131][T14929] Dev loop1: unable to read RDB block 7 [ 270.267023][T14929] loop1: unable to read partition table [ 270.272554][T14929] loop1: partition table beyond EOD, truncated [ 270.274518][T14929] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 270.350245][T14941] ------------[ cut here ]------------ [ 270.352123][T14941] 1 [ 270.352130][T14941] WARNING: mm/page_alloc.c:5225 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#0: syz.4.2615/14941 [ 270.356582][T14941] Modules linked in: [ 270.358361][T14941] CPU: 0 UID: 0 PID: 14941 Comm: syz.4.2615 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.361946][T14941] Tainted: [L]=SOFTLOCKUP [ 270.363387][T14941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.366823][T14941] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.369308][T14941] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 43 b9 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 270.375406][T14941] RSP: 0018:ffffc90005e5f790 EFLAGS: 00010246 [ 270.377504][T14941] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 270.380072][T14941] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 270.382724][T14941] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 270.385291][T14941] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 270.388028][T14941] R13: 1ffff92000bcbf41 R14: 0000000000000016 R15: 1ffff92000bcbf0b [ 270.390574][T14941] FS: 00007fcd613006c0(0000) GS:ffff8880d634d000(0000) knlGS:0000000000000000 [ 270.393464][T14941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.395624][T14941] CR2: 00007fcd60385800 CR3: 0000000025070000 CR4: 0000000000352ef0 [ 270.398287][T14941] Call Trace: [ 270.399429][T14941] [ 270.400441][T14941] ? is_bpf_text_address+0x8a/0x1a0 [ 270.402180][T14941] ? bpf_ksym_find+0x128/0x1c0 [ 270.403812][T14941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.405910][T14941] ? is_bpf_text_address+0x94/0x1a0 [ 270.407692][T14941] ? kernel_text_address+0x8d/0x100 [ 270.409413][T14941] ? __kernel_text_address+0xd/0x30 [ 270.411135][T14941] ? unwind_get_return_address+0x59/0xa0 [ 270.412993][T14941] ? arch_stack_walk+0xa6/0xf0 [ 270.414571][T14941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.416725][T14941] ? tomoyo_path_number_perm+0x46d/0x580 [ 270.418640][T14941] ? stack_trace_save+0x8e/0xc0 [ 270.420268][T14941] ? stack_depot_save_flags+0x27/0x9d0 [ 270.422046][T14941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.423965][T14941] ? policy_nodemask+0xed/0x4f0 [ 270.425595][T14941] alloc_pages_mpol+0x1fb/0x550 [ 270.427292][T14941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 270.429072][T14941] ? find_held_lock+0x2b/0x80 [ 270.430614][T14941] ? avc_has_extended_perms+0x33a/0x1080 [ 270.432477][T14941] ? drm_syncobj_array_find+0x35/0x3a0 [ 270.434255][T14941] ___kmalloc_large_node+0x104/0x150 [ 270.436017][T14941] __kmalloc_large_node_noprof+0x1c/0x70 [ 270.437945][T14941] __kmalloc_noprof+0x5be/0x850 [ 270.439554][T14941] ? __lock_acquire+0x4a5/0x2630 [ 270.441201][T14941] drm_syncobj_array_find+0x35/0x3a0 [ 270.442889][T14941] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 270.444894][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.447103][T14941] ? find_held_lock+0x2b/0x80 [ 270.448720][T14941] ? drm_dev_exit+0x41/0x60 [ 270.450233][T14941] ? drm_dev_exit+0x41/0x60 [ 270.451736][T14941] drm_ioctl_kernel+0x1f3/0x3e0 [ 270.453412][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.455591][T14941] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 270.457478][T14941] drm_ioctl+0x5e6/0xc60 [ 270.458855][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.460992][T14941] ? __pfx_drm_ioctl+0x10/0x10 [ 270.462546][T14941] ? selinux_file_ioctl+0x139/0x290 [ 270.464190][T14941] ? selinux_file_ioctl+0xb4/0x290 [ 270.465865][T14941] ? __pfx_drm_ioctl+0x10/0x10 [ 270.467481][T14941] __x64_sys_ioctl+0x18e/0x210 [ 270.469070][T14941] do_syscall_64+0x106/0xf80 [ 270.470614][T14941] ? clear_bhb_loop+0x40/0x90 [ 270.472170][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.474054][T14941] RIP: 0033:0x7fcd6039c139 [ 270.475531][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.481498][T14941] RSP: 002b:00007fcd61300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.484125][T14941] RAX: ffffffffffffffda RBX: 00007fcd60615fa0 RCX: 00007fcd6039c139 [ 270.486643][T14941] RDX: 0000200000000000 RSI: 00000000c03064ca RDI: 0000000000000003 [ 270.489175][T14941] RBP: 00007fcd604327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.491699][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.494182][T14941] R13: 00007fcd60616038 R14: 00007fcd60615fa0 R15: 00007fff6b4f13c8 [ 270.496749][T14941] [ 270.497844][T14941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 270.500115][T14941] CPU: 0 UID: 0 PID: 14941 Comm: syz.4.2615 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.503408][T14941] Tainted: [L]=SOFTLOCKUP [ 270.504770][T14941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 270.507913][T14941] Call Trace: [ 270.508992][T14941] [ 270.509927][T14941] dump_stack_lvl+0x100/0x190 [ 270.511421][T14941] vpanic+0x552/0x970 [ 270.512701][T14941] ? __pfx_vpanic+0x10/0x10 [ 270.514125][T14941] panic+0xd1/0xe0 [ 270.515313][T14941] ? __pfx_panic+0x10/0x10 [ 270.516777][T14941] check_panic_on_warn.cold+0x19/0x34 [ 270.518457][T14941] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.520387][T14941] __warn.cold+0x191/0x348 [ 270.521776][T14941] __report_bug+0x296/0x3d0 [ 270.523167][T14941] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.525064][T14941] ? __pfx___report_bug+0x10/0x10 [ 270.526652][T14941] ? __lock_acquire+0x4a5/0x2630 [ 270.528200][T14941] ? __lock_acquire+0x4a5/0x2630 [ 270.529814][T14941] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.531714][T14941] report_bug+0xb2/0x220 [ 270.533038][T14941] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.534950][T14941] handle_bug+0x166/0x2a0 [ 270.536352][T14941] exc_invalid_op+0x17/0x50 [ 270.537786][T14941] asm_exc_invalid_op+0x1a/0x20 [ 270.539305][T14941] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 270.541381][T14941] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 43 b9 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 270.547204][T14941] RSP: 0018:ffffc90005e5f790 EFLAGS: 00010246 [ 270.549102][T14941] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 270.551553][T14941] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 270.554044][T14941] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 270.556553][T14941] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 270.559017][T14941] R13: 1ffff92000bcbf41 R14: 0000000000000016 R15: 1ffff92000bcbf0b [ 270.561452][T14941] ? is_bpf_text_address+0x8a/0x1a0 [ 270.563081][T14941] ? bpf_ksym_find+0x128/0x1c0 [ 270.564603][T14941] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 270.566606][T14941] ? is_bpf_text_address+0x94/0x1a0 [ 270.568287][T14941] ? kernel_text_address+0x8d/0x100 [ 270.569947][T14941] ? __kernel_text_address+0xd/0x30 [ 270.571615][T14941] ? unwind_get_return_address+0x59/0xa0 [ 270.573421][T14941] ? arch_stack_walk+0xa6/0xf0 [ 270.574955][T14941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 270.577024][T14941] ? tomoyo_path_number_perm+0x46d/0x580 [ 270.578815][T14941] ? stack_trace_save+0x8e/0xc0 [ 270.580364][T14941] ? stack_depot_save_flags+0x27/0x9d0 [ 270.582102][T14941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 270.583982][T14941] ? policy_nodemask+0xed/0x4f0 [ 270.585569][T14941] alloc_pages_mpol+0x1fb/0x550 [ 270.587162][T14941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 270.588841][T14941] ? find_held_lock+0x2b/0x80 [ 270.590347][T14941] ? avc_has_extended_perms+0x33a/0x1080 [ 270.592152][T14941] ? drm_syncobj_array_find+0x35/0x3a0 [ 270.593869][T14941] ___kmalloc_large_node+0x104/0x150 [ 270.595537][T14941] __kmalloc_large_node_noprof+0x1c/0x70 [ 270.597367][T14941] __kmalloc_noprof+0x5be/0x850 [ 270.598927][T14941] ? __lock_acquire+0x4a5/0x2630 [ 270.600525][T14941] drm_syncobj_array_find+0x35/0x3a0 [ 270.602219][T14941] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 270.604180][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.606331][T14941] ? find_held_lock+0x2b/0x80 [ 270.607838][T14941] ? drm_dev_exit+0x41/0x60 [ 270.609302][T14941] ? drm_dev_exit+0x41/0x60 [ 270.610756][T14941] drm_ioctl_kernel+0x1f3/0x3e0 [ 270.612333][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.614400][T14941] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 270.616144][T14941] drm_ioctl+0x5e6/0xc60 [ 270.617512][T14941] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 270.619620][T14941] ? __pfx_drm_ioctl+0x10/0x10 [ 270.621174][T14941] ? selinux_file_ioctl+0x139/0x290 [ 270.622827][T14941] ? selinux_file_ioctl+0xb4/0x290 [ 270.624464][T14941] ? __pfx_drm_ioctl+0x10/0x10 [ 270.626007][T14941] __x64_sys_ioctl+0x18e/0x210 [ 270.627569][T14941] do_syscall_64+0x106/0xf80 [ 270.629051][T14941] ? clear_bhb_loop+0x40/0x90 [ 270.630563][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.632475][T14941] RIP: 0033:0x7fcd6039c139 [ 270.633906][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.639957][T14941] RSP: 002b:00007fcd61300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.642588][T14941] RAX: ffffffffffffffda RBX: 00007fcd60615fa0 RCX: 00007fcd6039c139 [ 270.645078][T14941] RDX: 0000200000000000 RSI: 00000000c03064ca RDI: 0000000000000003 [ 270.647601][T14941] RBP: 00007fcd604327e0 R08: 0000000000000000 R09: 0000000000000000 [ 270.650092][T14941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.652604][T14941] R13: 00007fcd60616038 R14: 00007fcd60615fa0 R15: 00007fff6b4f13c8 [ 270.655105][T14941] [ 270.656795][T14941] Kernel Offset: disabled [ 270.658177][T14941] Rebooting in 86400 seconds..